ComplianceNIST 800-53 enhancement

NIST-AU-5(2) Real-time Alerts

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AU Audit and Accountability
Control
AU-5(2)

Control statement

Provide an alert within [Assignment: real-time period] to [Assignment: personnel, roles, and/or locations] when the following audit failure events occur: [Assignment: audit logging failure events requiring real-time alerts].

Discussion

Alerts provide organizations with urgent messages. Real-time alerts provide these messages at information technology speed (i.e., the time from event detection to alert occurs in seconds or less).

Related

Enhancement of · Compliance (1)

  • NIST-AU-5 Response to Audit Logging Process Failures NIST 800-53 control