CMMC 2.0 • LEVEL 2 • AUDIT & ACCOUNTABILITY

AU.L2-3.3.6Audit Record Reduction and Report Generation

Implement an audit record reduction and report generation capability that supports audit record review, analysis, reporting requirements, and after-the-fact investigations of incidents. Preserve the original content and time ordering of audit records.

NIST 800-171 Mapping

NIST 800-53 Controls

Assessment Objectives

  • an audit record reduction and report generation capability that supports audit record review is implemented.
  • an audit record reduction and report generation capability that supports audit record analysis is implemented.
  • an audit record reduction and report generation capability that supports audit record reporting requirements is implemented.
  • an audit record reduction and report generation capability that supports after-the-fact investigations of incidents is implemented.
  • the original content of audit records is preserved.
  • the original time ordering of audit records is preserved.

Practitioner Notes

Practitioner commentary coming soon.