NIST-AU-11(1) Long-term Retrieval Capability

Employ [Assignment: measures] to ensure that long-term audit records generated by the system can be retrieved.

Organizations need to access and read audit records requiring long-term storage (on the order of years). Measures employed to help facilitate the retrieval of audit records include converting records to newer formats, retaining equipment capable of reading the records, and retaining the necessary documentation to help personnel understand how to interpret the records.