AU-9: Protection of Audit Information

audit information and audit logging tools are protected from unauthorized access, modification, and deletion;

personnel or roles are alerted upon detection of unauthorized access, modification, or deletion of audit information.

Audit and accountability policy

system security plan

privacy plan

access control policy and procedures

procedures addressing protection of audit information

system design documentation

system configuration settings and associated documentation

system audit records

audit tools

other relevant documents or records

Organizational personnel with audit and accountability responsibilities

organizational personnel with information security and privacy responsibilities

system/network administrators

system developers

Mechanisms implementing audit information protection