An error occurred:

CCIs

Number Definition Status Related
CCI-003812 Limit personally identifiable information contained in audit records to organization-defined elements identified in the privacy risk assessment. Draft
CCI-003813 Defines the elements identified in the privacy risk assessment for limiting personally identifiable information contained in audit records. Draft
CCI-003814 Defines the time-period for the alert in the event of an audit process failure. Draft
CCI-003815 Provide an alternate audit logging capability in the event of a failure in primary audit logging capability that implements organization-defined alternate audit logging functionality. Draft
CCI-003816 Defines the alternate audit logging functionality in the event of a failure in primary audit logging capability. Draft
CCI-003817 Review and analyze the potential impact of the organization-defined inappropriate or unusual activity. Draft
CCI-003818 Adjust the level of audit review and analysis within the system when there is a change in risk based on law enforcement information, intelligence information, or other credible sources of information. Draft
CCI-003819 Adjust the level of audit reporting within the system when there is a change in risk based on law enforcement information, intelligence information, or other credible sources of information. Draft
CCI-003820 Defines the automated mechanisms for integrating audit record review, analysis, and reporting processes. Draft
CCI-003821 Implement the capability to centrally review and analyze audit records from multiple components within the system. Draft
CCI-003822 Implement an audit reduction capability that supports on-demand audit review and analysis. Draft
CCI-003823 Implement an audit reduction capability that supports on-demand reporting requirements. Draft
CCI-003824 Implement an audit reduction capability that supports after-the-fact investigations of incidents. Draft
CCI-003825 Implement a report generation capability that supports on-demand audit review and analysis. Draft
CCI-003826 Implement a report generation capability that supports on-demand reporting requirements. Draft
CCI-003827 Implement a report generation capability that supports after-the-fact investigations of incidents. Draft
CCI-003828 Implement an audit reduction capability that does not alter original content or time ordering of audit records. Draft
CCI-003829 Implement a report generation capability that does not alter original content or time ordering of audit records. Draft
CCI-003830 Implement the capability to process, sort, and search audit records for events of interest based on organization-defined audit fields within audit records. Draft
CCI-003831 Alert organization-defined personnel or roles upon detection of unauthorized access, modification, or deletion of audit information. Draft
CCI-003832 Defines the personnel or roles to be alerted upon detection of unauthorized access, modification, or deletion of audit information. Draft
CCI-003833 Store audit information on a component running a different operating system than the system component being audited. Draft
CCI-003834 Implement the capability for organization-defined individuals or roles to change the auditing to be performed on organization-defined system components based on organization-defined selectable event criteria within organization-defined time thresholds. Draft
CCI-003835 Provide the capability for auditing the parameters of user query events for data sets containing personally identifiable information. Draft
CCI-003836 Implement the capability for auditing the parameters of user query events for data sets containing personally identifiable information. Draft
CCI-003837 If an information disclosure is discovered, notify organization-defined personnel or roles. Draft
CCI-003838 Defines the personnel or roles to be notified if an information disclosure is discovered. Draft
CCI-003839 If an information disclosure is discovered, take organization-defined additional actions. Draft
CCI-003840 Defines the additional actions to be taken if an information disclosure is discovered. Draft
CCI-003841 Monitor open-source information and information sites using organization-defined automated mechanisms. Draft