Detections
Analytics
800-53|AU-5(4)
Title
SHUTDOWN ON FAILUREDescription
The information system invokes a [Selection: full system shutdown; partial system shutdown; degraded operational mode with limited mission/business functionality available] in the event of [Assignment: organization-defined audit failures], unless an alternate audit capability exists.Supplemental
Organizations determine the types of audit failures that can trigger automatic information system shutdowns or degraded operations. Because of the importance of ensuring mission/business continuity, organizations may determine that the nature of the audit failure is not so severe that it warrants a complete shutdown of the information system supporting the core organizational missions/business operations. In those instances, partial information system shutdowns or operating in a degraded mode with reduced capability may be viable alternatives.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: AU-15
Category: AUDIT AND ACCOUNTABILITY
Parent Title: RESPONSE TO AUDIT PROCESSING FAILURES
Family: AUDIT AND ACCOUNTABILITY
Audit Items
View all Reference Audit Items