AU-09(03) Cryptographic Protection
NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
All changes in this version
Title
Cryptographic Protection
Control
Implement cryptographic mechanisms to protect the integrity of audit information and audit tools.
Discussion
Cryptographic mechanisms used for protecting the integrity of audit information include signed hash functions using asymmetric cryptography. This enables the distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
Related controls
au-10, sc-12, sc-13
Assessment objective
AU-09(03) cryptographic mechanisms to protect the integrity of audit information and audit tools are implemented.
STIG rules that implement this control 9
Apple macOS 15 (Sequoia) V1R8
- APPL-15-005001 CAT I The macOS system must ensure System Integrity Protection is enabled.
Apple macOS 26 (Tahoe) V1R4
- APPL-26-005001 CAT I The macOS system must ensure System Integrity Protection (SIP) is enabled.
Application Security and Development V6R5
- APSC-DV-001350 CAT II The application must use cryptographic mechanisms to protect the integrity of audit information.
- APSC-DV-001360 CAT II Application audit tools must be cryptographically hashed.
- APSC-DV-001370 CAT II The integrity of the audit tools must be validated by checking the files for changes in the cryptographic hash value.
Canonical Ubuntu 22.04 LTS V2R10
- UBTU-22-651030 CAT II Ubuntu 22.04 LTS must use cryptographic mechanisms to protect the integrity of audit tools.
Canonical Ubuntu 24.04 LTS V1R7
- UBTU-24-909890 CAT II Ubuntu 24.04 LTS must use cryptographic mechanisms to protect the integrity of audit tools.
Red Hat Enterprise Linux 10 V1R3
- RHEL-10-200631 CAT I RHEL 10 must use cryptographic mechanisms to protect the integrity of audit tools.
Red Hat Enterprise Linux 9 V2R10
- RHEL-09-651025 CAT II RHEL 9 must use cryptographic mechanisms to protect the integrity of audit tools.