AU-07 Audit Reduction And Report Generation

Audit and Accountability

Low Moderate High

Description

The information system provides an audit reduction and report generation capability.\n

Supplemental Guidance

Audit reduction, review, and reporting tools support after-the-fact investigations of security incidents without altering original audit records.\n

Changes from Rev 4

Title changed from 'Audit Reduction and Report Generation' Control text changes to include 'implement' Minor additions to discussion

Enhancements

\n

Compliance Mappings

ISO 27002:2022

6.88.15

SOC 2 TSC

CC7.2CC7.3

ISO 17799 (legacy)

10.10.3

COBIT 4.1 (legacy)

None.