AU-9(7): Store on Component with Different Operating System

Baselines:

(Not part of any baseline)

Info icon.

Control is new to this version of the control set.

Control Statement

Store audit information on a component running a different operating system than the system or component being audited.

Supplemental Guidance

Storing auditing information on a system component running a different operating system reduces the risk of a vulnerability specific to the system, resulting in a compromise of the audit records.