Detections
Analytics
800-53|AU-12(3)
Title
CHANGES BY AUTHORIZED INDIVIDUALSDescription
The information system provides the capability for [Assignment: organization-defined individuals or roles] to change the auditing to be performed on [Assignment: organization-defined information system components] based on [Assignment: organization-defined selectable event criteria] within [Assignment: organization-defined time thresholds].Supplemental
This control enhancement enables organizations to extend or limit auditing as necessary to meet organizational requirements. Auditing that is limited to conserve information system resources may be extended to address certain threat situations. In addition, auditing may be limited to a specific set of events to facilitate audit reduction, analysis, and reporting. Organizations can establish time thresholds in which audit actions are changed, for example, near real-time, within minutes, or within hours.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: AU-7
Category: AUDIT AND ACCOUNTABILITY
Parent Title: AUDIT GENERATION
Family: AUDIT AND ACCOUNTABILITY
Baseline Impact: HIGH
Audit Items
View all Reference Audit Items