CCI-000153

Analyze and correlate audit records across different repositories to gain organization-wide situational awareness.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to analyze and correlate audit records across different repositories to gain organization-wide situational awareness. The organization must maintain a record of the analysis.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the record of analysis to ensure the organization being inspected/assessed analyzes and correlates audit records across different repositories to gain organization-wide situational awareness.

Compelling Evidence

1.) Record of the analysis of correlation of audit records across different repositories

The controls below (if any) were marked by NIST as being related to CCI-000153.