800-53|AU-12(1)

Title

SYSTEM-WIDE / TIME-CORRELATED AUDIT TRAIL

Description

The information system compiles audit records from [Assignment: organization-defined information system components] into a system-wide (logical or physical) audit trail that is time-correlated to within [Assignment: organization-defined level of tolerance for the relationship between time stamps of individual records in the audit trail].

Supplemental

Audit trails are time-correlated if the time stamps in the individual audit records can be reliably related to the time stamps in other audit records to achieve a time ordering of the records within organizational tolerances.

Reference Item Details

Related: AU-12,AU-8

Category: AUDIT AND ACCOUNTABILITY

Parent Title: AUDIT GENERATION

Family: AUDIT AND ACCOUNTABILITY

Baseline Impact: HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.7 Set 'aaa accounting' to log all privileged use commands using 'commands 15'CiscoCIS Cisco IOS 15 L2 v4.0.1
1.1.7 Set 'aaa accounting' to log all privileged use commands using 'commands 15'CiscoCIS Cisco IOS 12 L2 v4.0.0
1.1.8 Set 'aaa accounting connection'CiscoCIS Cisco IOS 12 L2 v4.0.0
1.1.8 Set 'aaa accounting connection'CiscoCIS Cisco IOS 15 L2 v4.0.1
1.1.8 Set 'aaa accounting' to log all privileged use commands using 'commands 15'CiscoCIS Cisco IOS 16 L2 v1.1.0
1.1.9 Set 'aaa accounting connection'CiscoCIS Cisco IOS 16 L2 v1.1.0
1.1.9 Set 'aaa accounting exec'CiscoCIS Cisco IOS 15 L2 v4.0.1
1.1.9 Set 'aaa accounting exec'CiscoCIS Cisco IOS 12 L2 v4.0.0
1.1.10 Set 'aaa accounting exec'CiscoCIS Cisco IOS 16 L2 v1.1.0
1.1.10 Set 'aaa accounting network'CiscoCIS Cisco IOS 15 L2 v4.0.1
1.1.10 Set 'aaa accounting network'CiscoCIS Cisco IOS 12 L2 v4.0.0
1.1.11 Set 'aaa accounting network'CiscoCIS Cisco IOS 16 L2 v1.1.0
1.1.11 Set 'aaa accounting system'CiscoCIS Cisco IOS 12 L2 v4.0.0
1.1.11 Set 'aaa accounting system'CiscoCIS Cisco IOS 15 L2 v4.0.1
1.1.12 Set 'aaa accounting system'CiscoCIS Cisco IOS 16 L2 v1.1.0
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Enable macOS Time Synchronization Daemon (timed)UnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Enable macOS Time Synchronization Daemon (timed)UnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Enable macOS Time Synchronization Daemon (timed)UnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Enable macOS Time Synchronization Daemon (timed)UnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Enable macOS Time Synchronization Daemon (timed)UnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Enable macOS Time Synchronization Daemon (timed)UnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Enable macOS Time Synchronization Daemon (timed)UnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Enable macOS Time Synchronization Daemon (timed)UnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Catalina - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Catalina v1.5.0 - All Profiles
CISC-ND-001280 - The Cisco switch must generate audit records showing starting and ending time for administrator access to the system.CiscoDISA STIG Cisco IOS XE Switch NDM v1r1