AU-9(6)
AU-9(6): Read Only Access
The organization authorizes read-only access to audit information to [organization-defined subset of privileged users].
Supplemental
Restricting privileged user authorizations to read-only helps to limit the potential damage to organizations that could be initiated by such users (e.g., deleting audit records to cover up malicious activity).
| CIA Levels | |
|---|---|
| Confidentiality | unknown |
| Integrity | high |
| Availability | high |
| Overlays |
|---|
| None |
| CSF Categories |
|---|
| None |