AU-11(01) Long-term Retrieval Capability
Employ au-11.01_odp to ensure that long-term audit records generated by the system can be retrieved.
| Parameter ID | Definition |
|---|---|
| au-11.01_odp | measures |
Baselines
- L
- M
- H
- P
Guidance
Organizations need to access and read audit records requiring long-term storage (on the order of years). Measures employed to help facilitate the retrieval of audit records include converting records to newer formats, retaining equipment capable of reading the records, and retaining the necessary documentation to help personnel understand how to interpret the records.