AU-09.7 ยท Store on Component with Different Operating System

Control Description

Store audit information on a component running a different operating system than the system or component being audited.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Enhancement
Control Statement
The control requirements

Store audit information on a component running a different operating system than the system or component being audited.

Supplemental Guidance

Storing auditing information on a system component running a different operating system reduces the risk of a vulnerability specific to the system, resulting in a compromise of the audit records.

Related NIST Controls
Other NIST 800-53 controls related to this one
AU-04
AU-05
AU-11
SC-29