ComplianceNIST 800-53 enhancement

NIST-AU-9(3) Cryptographic Protection

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AU Audit and Accountability
Control
AU-9(3)

Control statement

Implement cryptographic mechanisms to protect the integrity of audit information and audit tools.

Discussion

Cryptographic mechanisms used for protecting the integrity of audit information include signed hash functions using asymmetric cryptography. This enables the distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.

Related

Enhancement of · Compliance (1)

  • NIST-AU-9 Protection of Audit Information NIST 800-53 control

Related control · Compliance (3)

  • NIST-AU-10 Non-repudiation NIST 800-53 control
  • NIST-SC-12 Cryptographic Key Establishment and Management NIST 800-53 control
  • NIST-SC-13 Cryptographic Protection NIST 800-53 control