`AU-09(03)` Cryptographic Protection

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version

Title

Cryptographic Protection

Control

Implement cryptographic mechanisms to protect the integrity of audit information and audit tools.

Discussion

Cryptographic mechanisms used for protecting the integrity of audit information include signed hash functions using asymmetric cryptography. This enables the distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.

Related controls

au-10, sc-12, sc-13

Assessment objective

AU-09(03) cryptographic mechanisms to protect the integrity of audit information and audit tools are implemented.

STIG rules that implement this control 9

Apple macOS 15 (Sequoia) V1R8

APPL-15-005001 CAT I The macOS system must ensure System Integrity Protection is enabled.

Apple macOS 26 (Tahoe) V1R4

APPL-26-005001 CAT I The macOS system must ensure System Integrity Protection (SIP) is enabled.

Application Security and Development V6R5

APSC-DV-001350 CAT II The application must use cryptographic mechanisms to protect the integrity of audit information.
APSC-DV-001360 CAT II Application audit tools must be cryptographically hashed.
APSC-DV-001370 CAT II The integrity of the audit tools must be validated by checking the files for changes in the cryptographic hash value.

Canonical Ubuntu 22.04 LTS V2R10

UBTU-22-651030 CAT II Ubuntu 22.04 LTS must use cryptographic mechanisms to protect the integrity of audit tools.

Canonical Ubuntu 24.04 LTS V1R7

UBTU-24-909890 CAT II Ubuntu 24.04 LTS must use cryptographic mechanisms to protect the integrity of audit tools.

Red Hat Enterprise Linux 10 V1R3

RHEL-10-200631 CAT I RHEL 10 must use cryptographic mechanisms to protect the integrity of audit tools.

Red Hat Enterprise Linux 9 V2R10

RHEL-09-651025 CAT II RHEL 9 must use cryptographic mechanisms to protect the integrity of audit tools.

AU-09(03) Cryptographic Protection