Audit and Accountability Policy and Procedures
Medium Priority
Intermediate Level
NIST CSF
The organization develops, documents, and disseminates audit and accountability policy and procedures that address purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.
Implementation Guidance
Develop comprehensive audit and accountability policies that define what events to log, how to protect audit logs, and how to review audit information.
Best Practices
Implement comprehensive logging, protect audit logs from tampering, conduct regular audit reviews, maintain audit trails
Testing Procedures
Test audit logging functionality, verify log protection mechanisms, review audit procedures
Related Guidelines
AU-2, AU-3, AU-4, AU-5, AU-6