CMMC 2.0 • LEVEL 2 • AUDIT & ACCOUNTABILITY

AU.L2-3.3.3 — Audit Record Generation

Generate audit records for the selected event types and audit record content specified in 03.03.01 and 03.03.02. Retain audit records for a time period consistent with the records retention policy.

NIST 800-171 Mapping

NIST 800-53 Controls

AU-6(3)

Assessment Objectives

  • audit records for the selected event types and audit record content specified in 03.03.01 and 03.03.02 are generated.
  • audit records are retained for a time period consistent with the records retention policy.

Practitioner Notes

Practitioner commentary coming soon.

Related CMMC 2.0 Practices

AU.L2-3.3.1 Event Logging AU.L2-3.3.2 Audit Record Content AU.L2-3.3.4 Response to Audit Logging Process Failures AU.L1-3.3.5 Audit Record Review, Analysis, and Reporting