AU-09(07) Store on Component with Different Operating System
Store audit information on a component running a different operating system than the system or component being audited.
Baselines
- L
- M
- H
- P
Guidance
Storing auditing information on a system component running a different operating system reduces the risk of a vulnerability specific to the system, resulting in a compromise of the audit records.
Related controls 4
- AU-04 Audit Log Storage Capacity L M H P
- AU-05 Response to Audit Logging Process Failures L M H P
- AU-11 Audit Record Retention L M H P
- SC-29 Heterogeneity L M H P