AU-05(02) Real-time Alerts

Provide an alert within au-05.02_odp.01 to au-05.02_odp.02 when the following audit failure events occur: au-05.02_odp.03.

Parameter ID Definition
au-05.02_odp.01 real-time period
au-05.02_odp.02 personnel, roles, and/or locations
au-05.02_odp.03 audit logging failure events requiring real-time alerts

Baselines

Guidance

Alerts provide organizations with urgent messages. Real-time alerts provide these messages at information technology speed (i.e., the time from event detection to alert occurs in seconds or less).