An error occurred:

CCIs

Number Definition Status Related
CCI-001861 Invoke a full system shutdown, partial system shutdown, or degraded operational mode with limited mission or business functionality available in the event of organization-defined audit logging failures, unless an alternate audit logging capability exists. Draft AU-5(4)
CCI-001862 Defines the types of inappropriate or unusual activity to be reviewed and analyzed in the audit records. Draft AU-6
CCI-001863 Defines the personnel or roles to receive the reports of organization-defined inappropriate or unusual activity. Draft AU-6
CCI-001864 Integrate audit review and analysis using organization-defined automated mechanisms. Draft AU-6(1)
CCI-001865 Integrate reporting processes using organization-defined automated mechanisms. Draft AU-6(1)
CCI-001866 Defines the data/information to be collected from other sources to enhance its ability to identify inappropriate or unusual activity. Draft AU-6(5)
CCI-001867 Integrate analysis of audit records with analysis of vulnerability scanning information, performance data, system monitoring information, and/or organization-defined data/information collected from other sources to further enhance the ability to identify inappropriate or unusual activity. Draft AU-6(5)
CCI-001868 Specify the permitted actions for each information system process, role, and/or user associated with the review and analysis of audit information. Draft AU-6(7)
CCI-001869 Specify the permitted actions for each information system process, role, and/or user associated with the reporting of audit information. Draft AU-6(7)
CCI-001870 Perform a full-text analysis of logged privileged commands in a physically-distinct component or subsystem of the system, or other system that is dedicated to that analysis. Draft AU-6(8)
CCI-001871 Correlate information from non-technical sources with audit record information to enhance organization-wide situational awareness. Draft AU-6(9)
CCI-001872 The organization adjusts the level of audit review and analysis within the information system when there is a change in risk based on law enforcement information, intelligence information, or other credible sources of information. Draft AU-6(10)
CCI-001873 The organization adjusts the level of audit analysis within the information system when there is a change in risk based on law enforcement information, intelligence information, or other credible sources of information. Deprecated AU-6(10)
CCI-001874 The organization adjusts the level of audit reporting within the information system when there is a change in risk based on law enforcement information, intelligence information, or other credible sources of information. Draft AU-6(10)
CCI-001875 Provide an audit reduction capability that supports on-demand audit review and analysis. Draft AU-7
CCI-001876 Provide an audit reduction capability that supports on-demand reporting requirements. Draft AU-7
CCI-001877 Provide an audit reduction capability that supports after-the-fact investigations of incidents. Draft AU-7
CCI-001878 Provide a report generation capability that supports on-demand audit review and analysis. Draft AU-7
CCI-001879 Provide a report generation capability that supports on-demand reporting requirements. Draft AU-7
CCI-001880 Provide a report generation capability that supports after-the-fact investigations of security incidents. Draft AU-7
CCI-001881 Provide an audit reduction capability that does not alter original content or time ordering of audit records. Draft AU-7
CCI-001882 Provide a report generation capability that does not alter original content or time ordering of audit records. Draft AU-7
CCI-001883 Defines the audit fields within audit records to be processed, sorted, and searched for events of interest by the system. Draft AU-7(1)
CCI-001884 The organization defines the audit fields within audit records to be sorted for events of interest by the information system. Draft AU-7(2)
CCI-001885 The organization defines the audit fields within audit records to be searched for events of interest by the information system. Draft AU-7(2)
CCI-001886 The information system provides the capability to sort audit records for events of interest based on the content of organization-defined audit fields within audit records. Draft AU-7(2)
CCI-001887 The information system provides the capability to search audit records for events of interest based on the content of organization-defined audit fields within audit records. Draft AU-7(2)
CCI-001888 Defines the granularity of time measurement for time stamps generated for audit records. Draft AU-8
CCI-001889 Record time stamps for audit records that meet organization-defined granularity of time measurement. Draft AU-8
CCI-001890 Record time stamps for audit records that use Coordinated Universal Time, have a fixed local time offset from Coordinated Universal Time, or that include the local time offset as part of the time stamp. Draft AU-8