AU-15 Alternate Audit Logging Capability
Audit and Accountability
Withdrawn
NIST has withdrawn this control from SP 800-53. Its content moved into AU-05. The description below is the one it had before.
Description
Provide an alternate audit logging capability in the event of a failure in primary audit logging capability that implements [Assignment: organization-defined alternate audit logging functionality].
Supplemental Guidance
Since an alternate audit logging capability may be a short-term protection measure employed until the failure in the primary audit logging capability is corrected, organizations may determine that the alternate audit logging capability need only provide a subset of the primary audit logging capability that is affected by the failure.
Compliance Mappings
ISO 27001:2022
7.5