CMMC 2.0 • LEVEL 2 • AUDIT & ACCOUNTABILITY

AU.L2-3.3.2Audit Record Content

Include the following content in audit records: What type of event occurred When the event occurred Where the event occurred Source of the event Outcome of the event Identity of the individuals, subjects, objects, or entities associated with the event Provide additional information for audit records as needed.

NIST 800-171 Mapping

NIST 800-53 Controls

Assessment Objectives

  • audit records contain information that establishes what type of event occurred.
  • audit records contain information that establishes when the event occurred.
  • audit records contain information that establishes where the event occurred.
  • audit records contain information that establishes the source of the event.
  • audit records contain information that establishes the outcome of the event.
  • audit records contain information that establishes the identity of the individuals, subjects, objects, or entities associated with the event.
  • additional information for audit records is provided, as needed.

Practitioner Notes

Practitioner commentary coming soon.