Provide an alert within [real-time period requiring alerts when audit failure events (defined in AU-05(02)_ODP[03]) occur is defined;] to [personnel, roles, and/or locations to be alerted in real time when audit failure events (defined in AU-05(02)_ODP[03]) occur is/are defined;] when the following audit failure events occur: [audit logging failure events requiring real-time alerts are defined;].
Supplemental
Alerts provide organizations with urgent messages. Real-time alerts provide these messages at information technology speed (i.e., the time from event detection to alert occurs in seconds or less).