ComplianceNIST 800-53 control

NIST-AU-4 Audit Log Storage Capacity

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AU Audit and Accountability
Control
AU-4

Control statement

Allocate audit log storage capacity to accommodate [Assignment: audit log retention requirements].

Discussion

Organizations consider the types of audit logging to be performed and the audit log processing requirements when allocating audit log storage capacity. Allocating sufficient audit log storage capacity reduces the likelihood of such capacity being exceeded and resulting in the potential loss or reduction of audit logging capability.

Related

Related control · Compliance (9)

  • NIST-AU-11 Audit Record Retention NIST 800-53 control
  • NIST-AU-12 Audit Record Generation NIST 800-53 control
  • NIST-AU-14 Session Audit NIST 800-53 control
  • NIST-AU-2 Event Logging NIST 800-53 control
  • NIST-AU-5 Response to Audit Logging Process Failures NIST 800-53 control
  • NIST-AU-6 Audit Record Review, Analysis, and Reporting NIST 800-53 control
  • NIST-AU-7 Audit Record Reduction and Report Generation NIST 800-53 control
  • NIST-AU-9 Protection of Audit Information NIST 800-53 control
  • NIST-SI-4 System Monitoring NIST 800-53 control

Referenced by Compliance · enhancement of (1)

  • NIST-AU-4(1) Transfer to Alternate Storage NIST 800-53 enhancement

Referenced by Compliance · has member (1)

  • NIST-AU Audit and Accountability NIST 800-53 family

Referenced by Compliance · related control (10)

  • NIST-AU-11 Audit Record Retention NIST 800-53 control
  • NIST-AU-12 Audit Record Generation NIST 800-53 control
  • NIST-AU-14 Session Audit NIST 800-53 control
  • NIST-AU-2 Event Logging NIST 800-53 control
  • NIST-AU-5 Response to Audit Logging Process Failures NIST 800-53 control
  • NIST-AU-7 Audit Record Reduction and Report Generation NIST 800-53 control
  • NIST-AU-9(1) Hardware Write-once Media NIST 800-53 enhancement
  • NIST-AU-9(2) Store on Separate Physical Systems or Components NIST 800-53 enhancement
  • NIST-AU-9(7) Store on Component with Different Operating System NIST 800-53 enhancement
  • NIST-SI-4(5) System-generated Alerts NIST 800-53 enhancement