AU-12.3: Changes by Authorized Individuals

the capability for individuals or roles to change the logging to be performed on system components based on selectable event criteria within time thresholds is provided;

the capability for individuals or roles to change the logging to be performed on system components based on selectable event criteria within time thresholds is implemented.

Audit and accountability policy

system security plan

privacy plan

procedures addressing audit record generation

system design documentation

system configuration settings and associated documentation

system-generated list of individuals or roles authorized to change auditing to be performed

system audit records

other relevant documents or records

Organizational personnel with audit record generation responsibilities

organizational personnel with information security and privacy responsibilities

system/network administrators

system developers

Mechanisms implementing audit record generation capability