CMMC Navigatorby Foxx Cyber Bedrock CMMC

↑↓ to move, Enter to open, Esc to close. Try 3.5.3, AC.L2-3.1.1, MFA or unmarked.

Audit and Accountability

Create, protect, and retain system audit records to enable monitoring and analysis.

Audit and accountability is about keeping logs that are good enough to reconstruct what happened, tying actions to named users, protecting the logs from tampering, and actually reviewing them. It is where many small contractors discover that the logs they have are not the logs they need.

  1. 3.3.1 Keep logs, and keep them long enough AU Level 2 5 pt
  2. 3.3.2 Tie actions to individuals AU Level 2 3 pt
  3. 3.3.3 Revisit what you log AU Level 2 1 pt
  4. 3.3.4 Get told when logging breaks AU Level 2 1 pt
  5. 3.3.5 Correlate logs across systems AU Level 2 5 pt
  6. 3.3.6 Be able to search and report on logs AU Level 2 1 pt
  7. 3.3.7 Synchronize clocks AU Level 2 1 pt
  8. 3.3.8 Protect the logs themselves AU Level 2 1 pt
  9. 3.3.9 Restrict who manages logging AU Level 2 1 pt