An error occurred:

CCIs

Number Definition Status Related
CCI-001831 The organization documents an audit and accountability policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance. Deprecated AU-1
CCI-001832 Disseminate the organization-level; mission/business process-level; and/or system-level audit and accountability policy to organization-defined personnel or roles. Draft AU-1
CCI-001833 The organization documents procedures to facilitate the implementation of the audit and accountability policy and associated audit and accountability controls. Deprecated AU-1
CCI-001834 Disseminate to organization-defined personnel or roles procedures to facilitate the implementation of the audit and accountability policy and associated audit and accountability controls. Draft AU-1
CCI-001835 The organization defines the frequency on which it will review the audit and accountability policy. Deprecated AU-1
CCI-001836 The organization defines the frequency on which it will update the audit and accountability policy. Deprecated AU-1
CCI-001837 The organization reviews the audit and accountability policy on an organization-defined frequency. Deprecated AU-1
CCI-001838 The organization updates the audit and accountability policy on an organization-defined frequency. Deprecated AU-1
CCI-001839 The organization defines the frequency on which it will review the audit and accountability procedures. Deprecated AU-1
CCI-001840 The organization defines the frequency on which it will update the audit and accountability procedures. Deprecated AU-1
CCI-001841 The organization reviews the audit and accountability procedures on an organization-defined frequency. Deprecated AU-1
CCI-001842 The organization updates the audit and accountability procedures on an organization-defined frequency. Deprecated AU-1
CCI-001843 The organization defines a frequency for updating the list of organization-defined auditable events. Deprecated AU-2(3)
CCI-001844 The information system provides centralized management and configuration of the content to be captured in audit records generated by organization-defined information system components. Draft AU-3(2)
CCI-001845 The information system provides centralized configuration of the content to be captured in audit records generated by organization-defined information system components. Deprecated AU-3(2)
CCI-001846 The organization defines information system components that will generate the audit records which are to be captured for centralized management of the content. Draft AU-3(2)
CCI-001847 The organization defines information system components that will generate the audit records which are to be captured for centralized configuration of the content. Draft AU-3(2)
CCI-001848 Defines the audit log retention requirements for allocating audit log storage capacity. Draft AU-4
CCI-001849 Allocate audit log storage capacity to accommodate organization-defined audit log retention requirements. Draft AU-4
CCI-001850 Defines the frequency to off-load audit records onto a different system or media than the system being audited. Draft AU-4(1)
CCI-001851 Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging. Draft AU-4(1)
CCI-001852 Defines the personnel, roles and/or locations to receive a warning when allocated audit log storage volume reaches a defined percentage of maximum audit log storage capacity. Draft AU-5(1)
CCI-001853 Defines the time period within which organization-defined personnel, roles, and/or locations are to receive warnings when allocated audit log storage volume reaches an organization-defined percentage of maximum audit log storage capacity. Draft AU-5(1)
CCI-001854 Defines the percentage of maximum audit log storage capacity that is to be reached, at which time the system will provide a warning to organization-defined personnel, roles, and/or locations. Draft AU-5(1)
CCI-001855 Provide a warning to organization-defined personnel, roles, and/or locations within an organization-defined time period when allocated audit log storage volume reaches an organization-defined percentage of repository maximum audit log storage capacity. Draft AU-5(1)
CCI-001856 Defines the real-time period in which to provide an alert when organization-defined audit failure events occur. Draft AU-5(2)
CCI-001857 Defines the personnel, roles, and/or locations to receive alerts when organization-defined audit failure events occur. Draft AU-5(2)
CCI-001858 Provide an alert in an organization-defined real-time-period to organization-defined personnel, roles, and/or locations when organization-defined audit failure events requiring real-time alerts occur. Draft AU-5(2)
CCI-001859 Defines the network communication traffic volume thresholds reflecting limits on auditing capacity, specifying when the information system will reject or delay network traffic that exceed those thresholds. Draft AU-5(3)
CCI-001860 Defines the audit logging failures which, should they occur, will invoke an organization-defined system mode. Draft AU-5(4)