Navigate

CCI-000159

CCI-000159 Definition

Use internal system clocks to generate time stamps for audit records.

Status
Type	CheckType.technical

Master Assessment Datasheet

Implementation Guidance

Determine if internal system clocks are used to generate timestamps for audit records.

Validation Procedures

Examine: [SELECT FROM: Audit and accountability policy; system security plan; privacy plan; procedures addressing timestamp generation; system design documentation; system configuration settings and associated documentation; system audit records; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with information security and privacy responsibilities; system/network administrators; system developers]. Test: [SELECT FROM: Mechanisms implementing timestamp generation].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000159.

Control	Description
AU-8	a: Use internal system clocks to generate time stamps for audit records; and b: Record time stamps for audit records that meet [granularity of time measurement for audit record timestamps is defined;] and that use Coordinated Universal Time, have a fixed local time offset from Coordinated Universal Time, or that include the local time offset as part of the time stamp.