---

id: "AU-04" title: "Audit Log Storage Capacity" family: "AU" family_name: "Audit and Accountability" sort_id: "au-04" priority: "P2" implementation_level: "system" enhancements: - au-4.1

---

Statement

Allocate audit log storage capacity to accommodate {{ insert: param, au-04_odp }}.

Guidance

Organizations consider the types of audit logging to be performed and the audit log processing requirements when allocating audit log storage capacity. Allocating sufficient audit log storage capacity reduces the likelihood of such capacity being exceeded and resulting in the potential loss or reduction of audit logging capability.

Assessment Objective

audit log storage capacity is allocated to accommodate {{ insert: param, au-04_odp }}.

Audit and accountability policy

procedures addressing audit storage capacity

system security plan

privacy plan

system design documentation

system configuration settings and associated documentation

audit record storage requirements

audit record storage capability for system components

system audit records

other relevant documents or records

Organizational personnel with audit and accountability responsibilities

organizational personnel with information security and privacy responsibilities

system/network administrators

system developers

Audit record storage capacity and related configuration settings