AU-9(3): Cryptographic Protection
Control Family:
Parent Control:
Threats Addressed:
Baselines:
- High
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- AU-9(3): Cryptographic Protection
Control Statement
Implement cryptographic mechanisms to protect the integrity of audit information and audit tools.
Supplemental Guidance
Cryptographic mechanisms used for protecting the integrity of audit information include signed hash functions using asymmetric cryptography. This enables the distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.