CCI-001850

The organization defines the frequency on which the information system off-loads audit records onto a different system or media than the system being audited.

Implementation Guidance

DoD has defined the frequency as at a minimum, real-time for interconnected systems and weekly for stand-alone systems.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as at a minimum, real-time for interconnected systems and weekly for stand-alone systems.

Compelling Evidence

Automatically Compliant

The controls below (if any) were marked by NIST as being related to CCI-001850.