AU-12(01) System-wide and Time-correlated Audit Trail

Compile audit records from au-12.01_odp.01 into a system-wide (logical or physical) audit trail that is time-correlated to within au-12.01_odp.02.

Parameter ID Definition
au-12.01_odp.01 system components
au-12.01_odp.02 level of tolerance

Baselines

Guidance

Audit trails are time-correlated if the time stamps in the individual audit records can be reliably related to the time stamps in other audit records to achieve a time ordering of the records within organizational tolerances.

Related controls 2