AU-6(3): Correlate Audit Record Repositories

CSF v2.0 References:

PF v1.0 References:

Threats Addressed:

Baselines:

  • Moderate
  • High
  • OT Moderate (SP 800-82r3)
  • OT High (SP 800-82r3)

Previous Version:

Control Statement

Analyze and correlate audit records across different repositories to gain organization-wide situational awareness.

Supplemental Guidance

Organization-wide situational awareness includes awareness across all three levels of risk management (i.e., organizational level, mission/business process level, and information system level) and supports cross-organization awareness.