BaselineWatch
Desk

AU-05(04) Shutdown on Failure

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged AU part of AU-5

Title

Shutdown on Failure

Control

Invoke a [Selection (one or more): full system shutdown; partial system shutdown; degraded operational mode with limited mission or business functionality available] in the event of [Assignment: audit logging failures] , unless an alternate audit logging capability exists.

Discussion

Organizations determine the types of audit logging failures that can trigger automatic system shutdowns or degraded operations. Because of the importance of ensuring mission and business continuity, organizations may determine that the nature of the audit logging failure is not so severe that it warrants a complete shutdown of the system supporting the core organizational mission and business functions. In those instances, partial system shutdowns or operating in a degraded mode with reduced capability may be viable alternatives.

Parameters

au-05.04_odp.01: [full system shutdown; partial system shutdown; degraded operational mode with limited mission or business functionality available]
au-05.04_odp.02: audit logging failures

Related controls

au-15

Assessment objective

AU-05(04) [Selection (one or more): full system shutdown; partial system shutdown; degraded operational mode with limited mission or business functionality available] is/are invoked in the event of [Assignment: audit logging failures] , unless an alternate audit logging capability exists.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).