ComplianceNIST 800-53 control

NIST-AU-12 Audit Record Generation

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AU Audit and Accountability
Control
AU-12

Control statement

a. Provide audit record generation capability for the event types the system is capable of auditing as defined in [AU-2a](#au-2_smt.a) on [Assignment: system components]; b. Allow [Assignment: personnel or roles] to select the event types that are to be logged by specific components of the system; and c. Generate audit records for the event types defined in [AU-2c](#au-2_smt.c) that include the audit record content defined in [AU-3](#au-3).

Discussion

Audit records can be generated from many different system components. The event types specified in [AU-2d](#au-2_smt.d) are the event types for which audit logs are to be generated and are a subset of all event types for which the system can generate audit records.

Related

Related control · Compliance (19)

  • NIST-AC-17 Remote Access NIST 800-53 control
  • NIST-AC-6 Least Privilege NIST 800-53 control
  • NIST-AU-14 Session Audit NIST 800-53 control
  • NIST-AU-2 Event Logging NIST 800-53 control
  • NIST-AU-3 Content of Audit Records NIST 800-53 control
  • NIST-AU-4 Audit Log Storage Capacity NIST 800-53 control
  • NIST-AU-5 Response to Audit Logging Process Failures NIST 800-53 control
  • NIST-AU-6 Audit Record Review, Analysis, and Reporting NIST 800-53 control
  • NIST-AU-7 Audit Record Reduction and Report Generation NIST 800-53 control
  • NIST-CM-5 Access Restrictions for Change NIST 800-53 control
  • NIST-MA-4 Nonlocal Maintenance NIST 800-53 control
  • NIST-MP-4 Media Storage NIST 800-53 control
  • NIST-PM-12 Insider Threat Program NIST 800-53 control
  • NIST-SA-8 Security and Privacy Engineering Principles NIST 800-53 control
  • NIST-SC-18 Mobile Code NIST 800-53 control
  • NIST-SI-10 Information Input Validation NIST 800-53 control
  • NIST-SI-3 Malicious Code Protection NIST 800-53 control
  • NIST-SI-4 System Monitoring NIST 800-53 control
  • NIST-SI-7 Software, Firmware, and Information Integrity NIST 800-53 control

Referenced by Compliance · enhancement of (4)

  • NIST-AU-12(1) System-wide and Time-correlated Audit Trail NIST 800-53 enhancement
  • NIST-AU-12(2) Standardized Formats NIST 800-53 enhancement
  • NIST-AU-12(3) Changes by Authorized Individuals NIST 800-53 enhancement
  • NIST-AU-12(4) Query Parameter Audits of Personally Identifiable Information NIST 800-53 enhancement

Referenced by Compliance · has member (1)

  • NIST-AU Audit and Accountability NIST 800-53 family

Referenced by Compliance · related control (27)

  • NIST-AC-17(1) Monitoring and Control NIST 800-53 enhancement
  • NIST-AC-2 Account Management NIST 800-53 control
  • NIST-AC-3(10) Audited Override of Access Control Mechanisms NIST 800-53 enhancement
  • NIST-AC-4(26) Audit Filtering Actions NIST 800-53 enhancement
  • NIST-AC-6(9) Log Use of Privileged Functions NIST 800-53 enhancement
  • NIST-AU-14 Session Audit NIST 800-53 control
  • NIST-AU-2 Event Logging NIST 800-53 control
  • NIST-AU-3 Content of Audit Records NIST 800-53 control
  • NIST-AU-4 Audit Log Storage Capacity NIST 800-53 control
  • NIST-AU-5 Response to Audit Logging Process Failures NIST 800-53 control
  • NIST-AU-6(3) Correlate Audit Record Repositories NIST 800-53 enhancement
  • NIST-AU-6(4) Central Review and Analysis NIST 800-53 enhancement
  • NIST-AU-6(5) Integrated Analysis of Audit Records NIST 800-53 enhancement
  • NIST-AU-6(8) Full Text Analysis of Privileged Commands NIST 800-53 enhancement
  • NIST-AU-7 Audit Record Reduction and Report Generation NIST 800-53 control
  • NIST-AU-8 Time Stamps NIST 800-53 control
  • NIST-CM-5(1) Automated Access Enforcement and Audit Records NIST 800-53 enhancement
  • NIST-MA-4(1) Logging and Review NIST 800-53 enhancement
  • NIST-MP-4(2) Automated Restricted Access NIST 800-53 enhancement
  • NIST-PE-6 Monitoring Physical Access NIST 800-53 control
  • NIST-PM-12 Insider Threat Program NIST 800-53 control
  • NIST-SA-8(22) Accountability and Traceability NIST 800-53 enhancement
  • NIST-SC-18 Mobile Code NIST 800-53 control
  • NIST-SI-10(1) Manual Override Capability NIST 800-53 enhancement
  • NIST-SI-3(8) Detect Unauthorized Commands NIST 800-53 enhancement
  • NIST-SI-4 System Monitoring NIST 800-53 control
  • NIST-SI-7(8) Auditing Capability for Significant Events NIST 800-53 enhancement