Description
Provide an alternate audit logging capability in the event of a failure in primary audit logging capability that implements [Assignment: organization-defined alternate audit logging functionality].
Supplemental Guidance
Since an alternate audit logging capability may be a short-term protection measure employed until the failure in the primary audit logging capability is corrected, organizations may determine that the alternate audit logging capability need only provide a subset of the primary audit logging capability that is affected by the failure.
Changes from Rev 4
New control in Rev 5.
Compliance Mappings
ISO 27001:2022
7.5