Navigate

AU-16(1)

AU-16(1): Identity Preservation

Preserve the identity of individuals in cross-organizational audit trails.

Supplemental

Identity preservation is applied when there is a need to be able to trace actions that are performed across organizational boundaries to a specific individual.

CIA Levels
Confidentiality	unknown
Integrity	moderate
Availability	unknown

Overlays
Classified, Int-A, Int-B, Int-C

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to AU-16(1).

Control	Description
IA-2	Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.
IA-4	Manage system identifiers by: a: Receiving authorization from [personnel or roles from whom authorization must be received to assign an identifier are defined;] to assign an individual, group, role, service, or device identifier; b: Selecting an identifier that identifies an individual, group, role, service, or device; c: Assigning the identifier to the intended individual, group, role, service, or device; and d: Preventing reuse of identifiers for [a time period for preventing reuse of identifiers is defined;].
IA-5	Manage system authenticators by: a: Verifying, as part of the initial authenticator distribution, the identity of the individual, group, role, service, or device receiving the authenticator; b: Establishing initial authenticator content for any authenticators issued by the organization; c: Ensuring that authenticators have sufficient strength of mechanism for their intended use; d: Establishing and implementing administrative procedures for initial authenticator distribution, for lost or compromised or damaged authenticators, and for revoking authenticators; e: Changing default authenticators prior to first use; f: Changing or refreshing authenticators [a time period for changing or refreshing authenticators by authenticator type is defined;] or when [events that trigger the change or refreshment of authenticators are defined;] occur; g: Protecting authenticator content from unauthorized disclosure and modification; h: Requiring individuals to take, and having devices implement, specific controls to protect authenticators; and i: Changing authenticators for group or role accounts when membership to those accounts changes.
IA-8	Uniquely identify and authenticate non-organizational users or processes acting on behalf of non-organizational users.

Enhancements

The controls below (if any) add on to the requirements of AU-16(1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AU-16(1).

CCI	Definition
CCI-001926	Preserve the identity of individuals in cross-organizational audit trails.