Navigate

AU-5(1)

AU-5(1): Audit Storage Capacity

The information system provides a warning to [organization-defined personnel, roles, and/or locations] within [organization-defined time period] when allocated audit record storage volume reaches [organization-defined percentage] of repository maximum audit record storage capacity.

Supplemental

Organizations may have multiple audit data storage repositories distributed across multiple information system components, with each repository having different storage volume capacities.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	high

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to AU-5(1).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of AU-5(1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AU-5(1).

CCI	Definition
CCI-001852	Defines the personnel, roles and/or locations to receive a warning when allocated audit log storage volume reaches a defined percentage of maximum audit log storage capacity.
CCI-001853	Defines the time period within which organization-defined personnel, roles, and/or locations are to receive warnings when allocated audit log storage volume reaches an organization-defined percentage of maximum audit log storage capacity.
CCI-001854	Defines the percentage of maximum audit log storage capacity that is to be reached, at which time the system will provide a warning to organization-defined personnel, roles, and/or locations.
CCI-001855	Provide a warning to organization-defined personnel, roles, and/or locations within an organization-defined time period when allocated audit log storage volume reaches an organization-defined percentage of repository maximum audit log storage capacity.