Skip to main content

💼 AU-7 Audit Record Reduction and Report Generation

  • Contextual name: 💼 AU-7 Audit Record Reduction and Report Generation
  • ID: /frameworks/nist-sp-800-53-r5/au/07
  • Located in: 💼 AU Audit And Accountability

Description​

Provide and implement an audit record reduction and report generation capability that: a. Supports on-demand audit record review, analysis, and reporting requirements and after-the-fact investigations of incidents; and b. Does not alter the original content or time ordering of audit records.

Similar​

  • Internal
    • ID: dec-c-b54d987a

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 FedRAMP High Security Controls → 💼 AU-7 Audit Record Reduction and Report Generation (M)(H)11
💼 NIST CSF v2.0 → 💼 RS.AN-03: Analysis is performed to establish what has taken place during an incident and the root cause of the incident
💼 NIST CSF v2.0 → 💼 RS.AN-06: Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved
💼 NIST CSF v2.0 → 💼 RS.AN-07: Incident data and metadata are collected, and their integrity and provenance are preserved

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 AU-7(1) Audit Record Reduction and Report Generation _ Automatic Processing11
💼 AU-7(2) Audit Record Reduction and Report Generation _ Automatic Sort and Search