RA-5(8)

RA-5(8): Review Historic Audit Logs

The organization reviews historic audit logs to determine if a vulnerability identified in the information system has been previously exploited.

Overlays
None

CSF Categories
None

The controls below (if any) were marked by NIST as being related to RA-5(8).

Control	Description
AU-6	The organization: a: Reviews and analyzes information system audit records [organization-defined frequency] for indications of [organization-defined inappropriate or unusual activity]; and b: Reports findings to [organization-defined personnel or roles].

The controls below (if any) add on to the requirements of RA-5(8).

Control	Description
No controls

The CCIs below are tied to RA-5(8).

CCI	Definition
CCI-001071	Review historic audit logs to determine if a vulnerability identified in the organization-defined system has been previously exploited within an organization-defined time period.