CCI-002045

Employ organization-defined measures to ensure that long-term audit records generated by the information system can be retrieved.

Implementation Guidance

Determine if [AU-11(01)_ODP; measures to be employed to ensure that long-term audit records generated by the system can be retrieved are defined] are employed to ensure that long-term audit records generated by the system can be retrieved.

Validation Procedures

Examine: [SELECT FROM: Audit and accountability policy; system security plan; privacy plan; audit record retention policy and procedures; system design documentation; system configuration settings and associated documentation; audit record archives; audit logs; audit records; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with audit record retention responsibilities; organizational personnel with information security and privacy responsibilities; system/network administrators]. Test: [SELECT FROM: Mechanisms implementing audit record retention capability].

The controls below (if any) were marked by NIST as being related to CCI-002045.