CCI-000168

The organization defines the time period for retention of audit records, which is consistent with its records retention policy, to provide support for after-the-fact investigations of security incidents and meet regulatory and organizational information retention requirements.

Implementation Guidance

DoD has defined the time period as 5 years for SAMI; otherwise for at least 1 year.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the time period as 5 years for SAMI; otherwise for at least 1 year.

Compelling Evidence

Automatically Compliant

The controls below (if any) were marked by NIST as being related to CCI-000168.