AU-11.1 ยท Long-term Retrieval Capability

Control Description

Employ {{ insert: param, au-11.01_odp }} to ensure that long-term audit records generated by the system can be retrieved.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Assurance
Enhancement
Control Statement
The control requirements

Employ {{ insert: param, au-11.01_odp }} to ensure that long-term audit records generated by the system can be retrieved.

Supplemental Guidance

Organizations need to access and read audit records requiring long-term storage (on the order of years). Measures employed to help facilitate the retrieval of audit records include converting records to newer formats, retaining equipment capable of reading the records, and retaining the necessary documentation to help personnel understand how to interpret the records.