AU-12(01) System-wide and Time-correlated Audit Trail
NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
All changes in this version
Title
System-wide and Time-correlated Audit Trail
Control
Compile audit records from [Assignment: system components] into a system-wide (logical or physical) audit trail that is time-correlated to within [Assignment: level of tolerance].
Discussion
Audit trails are time-correlated if the time stamps in the individual audit records can be reliably related to the time stamps in other audit records to achieve a time ordering of the records within organizational tolerances.
Parameters
au-12.01_odp.01: system components
au-12.01_odp.02: level of tolerance
Related controls
au-8, sc-45
Assessment objective
AU-12(01) audit records from [Assignment: system components] are compiled into a system-wide (logical or physical) audit trail that is time-correlated to within [Assignment: level of tolerance].
STIG rules that implement this control 1
Application Security and Development V6R5
- APSC-DV-000600 CAT II For applications providing audit record aggregation, the application must compile audit records from organization-defined information system components into a system-wide audit trail that is time-correlated with an organization-defined level of tolerance for the relationship between time stamps of individual records in the audit trail.