ComplianceNIST 800-53 enhancement
NIST-AU-9(6) Read-only Access
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- AU Audit and Accountability
- Control
- AU-9(6)
Control statement
Authorize read-only access to audit information to [Assignment: subset of privileged users or roles].
Discussion
Restricting privileged user or role authorizations to read-only helps to limit the potential damage to organizations that could be initiated by such users or roles, such as deleting audit records to cover up malicious activity.
Related
Enhancement of · Compliance (1)
- NIST-AU-9 Protection of Audit Information NIST 800-53 control