CMMC 2.0 • LEVEL 2 • AUDIT & ACCOUNTABILITY
AU.L2-3.3.7 — Time Stamps
Use internal system clocks to generate time stamps for audit records. Record time stamps for audit records that meet 1-second granularity, synchronized to an authoritative time source (NTP from a DoD-approved Stratum 2 server)CMMC/STIG and that use Coordinated Universal Time (UTC), have a fixed local time offset from UTC, or include the local time offset as part of the time stamp.
Assessment Objectives
- internal system clocks are used to generate time stamps for audit records.
- time stamps are recorded for audit records that use Coordinated Universal Time (UTC), have a fixed local time offset from UTC, or include the local time offset as part of the time stamp.
- time stamps are recorded for audit records that meet 1-second granularity, synchronized to an authoritative time source (NTP from a DoD-approved Stratum 2 server)CMMC/STIG.
Practitioner Notes
Practitioner commentary coming soon.