AU-12: Audit Record Generation

audit record generation capability for the event types the system is capable of auditing (defined in AU-02_ODP[01]) is provided by system components ;

personnel or roles is/are allowed to select the event types that are to be logged by specific components of the system;

audit records for the event types defined in AU-02_ODP[02] that include the audit record content defined in AU-03 are generated.

Audit and accountability policy

procedures addressing audit record generation

system security plan

privacy plan

system design documentation

system configuration settings and associated documentation

list of auditable events

system audit records

other relevant documents or records

Organizational personnel with audit record generation responsibilities

organizational personnel with information security and privacy responsibilities

system/network administrators

system developers

Mechanisms implementing audit record generation capability