Skip to content

The audit system must produce records containing sufficient information to establish the identity of any user/subject associated with the event.

An XCCDF Rule