| 💼 AU-1 AUDIT AND ACCOUNTABILITY POLICY AND PROCEDURES | | | | |
| 💼 AU-2 AUDIT EVENTS | 4 | 2 | 3 | |
| 💼 AU-2 (1) COMPILATION OF AUDIT RECORDS FROM MULTIPLE SOURCES | | | | |
| 💼 AU-2 (2) SELECTION OF AUDIT EVENTS BY COMPONENT | | | | |
| 💼 AU-2 (3) REVIEWS AND UPDATES | | | | |
| 💼 AU-2 (4) PRIVILEGED FUNCTIONS | | | | |
| 💼 AU-3 CONTENT OF AUDIT RECORDS | 2 | | | |
| 💼 AU-3 (1) ADDITIONAL AUDIT INFORMATION | | | | |
| 💼 AU-3 (2) CENTRALIZED MANAGEMENT OF PLANNED AUDIT RECORD CONTENT | | | | |
| 💼 AU-4 AUDIT STORAGE CAPACITY | 1 | | | |
| 💼 AU-4 (1) TRANSFER TO ALTERNATE STORAGE | | | | |
| 💼 AU-5 RESPONSE TO AUDIT PROCESSING FAILURES | 4 | | | |
| 💼 AU-5 (1) AUDIT STORAGE CAPACITY | | | | |
| 💼 AU-5 (2) REAL-TIME ALERTS | | | | |
| 💼 AU-5 (3) CONFIGURABLE TRAFFIC VOLUME THRESHOLDS | | | | |
| 💼 AU-5 (4) SHUTDOWN ON FAILURE | | | | |
| 💼 AU-6 AUDIT REVIEW, ANALYSIS, AND REPORTING | 10 | 2 | 2 | |
| 💼 AU-6 (1) PROCESS INTEGRATION | | | | |
| 💼 AU-6 (2) AUTOMATED SECURITY ALERTS | | | | |
| 💼 AU-6 (3) CORRELATE AUDIT REPOSITORIES | | | | |
| 💼 AU-6 (4) CENTRAL REVIEW AND ANALYSIS | | | | |
| 💼 AU-6 (5) INTEGRATION _ SCANNING AND MONITORING CAPABILITIES | | | | |
| 💼 AU-6 (6) CORRELATION WITH PHYSICAL MONITORING | | | | |
| 💼 AU-6 (7) PERMITTED ACTIONS | | | | |
| 💼 AU-6 (8) FULL TEXT ANALYSIS OF PRIVILEGED COMMANDS | | | | |
| 💼 AU-6 (9) CORRELATION WITH INFORMATION FROM NONTECHNICAL SOURCES | | | | |
| 💼 AU-6 (10) AUDIT LEVEL ADJUSTMENT | | | | |
| 💼 AU-7 AUDIT REDUCTION AND REPORT GENERATION | 2 | | | |
| 💼 AU-7 (1) AUTOMATIC PROCESSING | | | | |
| 💼 AU-7 (2) AUTOMATIC SORT AND SEARCH | | | | |
| 💼 AU-8 TIME STAMPS | 2 | | | |
| 💼 AU-8 (1) SYNCHRONIZATION WITH AUTHORITATIVE TIME SOURCE | | | | |
| 💼 AU-8 (2) SECONDARY AUTHORITATIVE TIME SOURCE | | | | |
| 💼 AU-9 PROTECTION OF AUDIT INFORMATION | 6 | | | |
| 💼 AU-9 (1) HARDWARE WRITE-ONCE MEDIA | | | | |
| 💼 AU-9 (2) AUDIT BACKUP ON SEPARATE PHYSICAL SYSTEMS _ COMPONENTS | | | | |
| 💼 AU-9 (3) CRYPTOGRAPHIC PROTECTION | | | | |
| 💼 AU-9 (4) ACCESS BY SUBSET OF PRIVILEGED USERS | | | | |
| 💼 AU-9 (5) DUAL AUTHORIZATION | | | | |
| 💼 AU-9 (6) READ ONLY ACCESS | | | | |
| 💼 AU-10 NON-REPUDIATION | 5 | 1 | 1 | |
| 💼 AU-10 (1) ASSOCIATION OF IDENTITIES | | | | |
| 💼 AU-10 (2) VALIDATE BINDING OF INFORMATION PRODUCER IDENTITY | | | | |
| 💼 AU-10 (3) CHAIN OF CUSTODY | | | | |
| 💼 AU-10 (4) VALIDATE BINDING OF INFORMATION REVIEWER IDENTITY | | | | |
| 💼 AU-10 (5) DIGITAL SIGNATURES | | | | |
| 💼 AU-11 AUDIT RECORD RETENTION | 1 | 1 | 1 | |
| 💼 AU-11 (1) LONG-TERM RETRIEVAL CAPABILITY | | | | |
| 💼 AU-12 AUDIT GENERATION | 3 | | | |
| 💼 AU-12 (1) SYSTEM-WIDE _ TIME-CORRELATED AUDIT TRAIL | | | | |
| 💼 AU-12 (2) STANDARDIZED FORMATS | | | | |
| 💼 AU-12 (3) CHANGES BY AUTHORIZED INDIVIDUALS | | | | |
| 💼 AU-13 MONITORING FOR INFORMATION DISCLOSURE | 2 | | | |
| 💼 AU-13 (1) USE OF AUTOMATED TOOLS | | | | |
| 💼 AU-13 (2) REVIEW OF MONITORED SITES | | | | |
| 💼 AU-14 SESSION AUDIT | 3 | | | |
| 💼 AU-14 (1) SYSTEM START-UP | | | | |
| 💼 AU-14 (2) CAPTURE_RECORD AND LOG CONTENT | | | | |
| 💼 AU-14 (3) REMOTE VIEWING _ LISTENING | | | | |
| 💼 AU-15 ALTERNATE AUDIT CAPABILITY | | | | |
| 💼 AU-16 CROSS-ORGANIZATIONAL AUDITING | 2 | | | |
| 💼 AU-16 (1) IDENTITY PRESERVATION | | | | |
| 💼 AU-16 (2) SHARING OF AUDIT INFORMATION | | | | |