Navigate

• Top
• Description
• MAD
• Related

CCI-001877

CCI-001877 Definition

Provide an audit reduction capability that supports after-the-fact investigations of incidents.

Status
Type	CheckType.technical

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001877.

Control	Description
AU-7	The information system provides an audit reduction and report generation capability that: a: Supports on-demand audit review, analysis, and reporting requirements and after-the-fact investigations of security incidents; and b: Does not alter the original content or time ordering of audit records.