CCI-000129

The organization defines in the auditable events that the information system must be capable of auditing based on a risk assessment and mission/business needs.

Implementation Guidance

Validation Procedures

Compelling Evidence

The controls below (if any) were marked by NIST as being related to CCI-000129.