CCI-000168

Defines the time period for retention of audit records, which is consistent with its records retention policy, to provide support for after-the-fact investigations of incidents and meet regulatory and organizational information retention requirements.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-000168.