Navigate

AU-5 (1)

AU-5 (1): Audit Storage Capacity

The information system provides a warning to [Assignment: organization-defined personnel, roles, and/or locations] within [Assignment: organization-defined time period] when allocated audit record storage volume reaches [Assignment: organization-defined percentage] of repository maximum audit record storage capacity.

Supplemental

Organizations may have multiple audit data storage repositories distributed across multiple information system components, with each repository having different storage volume capacities.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	low

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to AU-5 (1).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of AU-5 (1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AU-5 (1).

CCI	Definition
CCI-001852	The organization defines the personnel, roles and/or locations to receive a warning when allocated audit record storage volume reaches a defined percentage of maximum audit records storage capacity.
CCI-001853	The organization defines the time period within which organization-defined personnel, roles, and/or locations are to receive warnings when allocated audit record storage volume reaches an organization-defined percentage of maximum audit records storage capacity.
CCI-001854	The organization defines the percentage of maximum audit record storage capacity that is to be reached, at which time the information system will provide a warning to organization-defined personnel, roles, and/or locations.
CCI-001855	The information system provides a warning to organization-defined personnel, roles, and/or locations within an organization-defined time period when allocated audit record storage volume reaches an organization-defined percentage of repository maximum audit record storage capacity.