AU-06.4 ยท Central Review and Analysis

Control Description

Provide and implement the capability to centrally review and analyze audit records from multiple components within the system.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
system
Assurance
Enhancement
Control Statement
The control requirements

Provide and implement the capability to centrally review and analyze audit records from multiple components within the system.

Supplemental Guidance

Automated mechanisms for centralized reviews and analyses include Security Information and Event Management products.

Related NIST Controls
Other NIST 800-53 controls related to this one
AU-02
AU-12