Audit and Accountability (AU)
The Audit and Accountability family has 15 active controls in SP 800-53 release 5.2.0. “Yes” marks membership in the SP 800-53B baselines.
| Control | Title | Low | Moderate | High | Privacy |
|---|---|---|---|---|---|
| AU-1 | Policy and Procedures | Yes | Yes | Yes | Yes |
| AU-2 | Event Logging | Yes | Yes | Yes | Yes |
| AU-3 | Content of Audit Records | Yes | Yes | Yes | |
| AU-4 | Audit Log Storage Capacity | Yes | Yes | Yes | |
| AU-5 | Response to Audit Logging Process Failures | Yes | Yes | Yes | |
| AU-6 | Audit Record Review, Analysis, and Reporting | Yes | Yes | Yes | |
| AU-7 | Audit Record Reduction and Report Generation | Yes | Yes | ||
| AU-8 | Time Stamps | Yes | Yes | Yes | |
| AU-9 | Protection of Audit Information | Yes | Yes | Yes | |
| AU-10 | Non-repudiation | Yes | |||
| AU-11 | Audit Record Retention | Yes | Yes | Yes | Yes |
| AU-12 | Audit Record Generation | Yes | Yes | Yes | |
| AU-13 | Monitoring for Information Disclosure | ||||
| AU-14 | Session Audit | ||||
| AU-16 | Cross-organizational Audit Logging |
Withdrawn controls: AU-15.
Independent guidance, not an official NIST publication. Control text is from NIST SP 800-53 Rev. 5 and SP 800-53A (public domain). Original content is licensed CC BY 4.0; program templates and the downloadable kit are dedicated to the public domain under CC0 1.0.