id: "AU-05(05)" title: "Alternate Audit Logging Capability" family: "AU" family_name: "Audit and Accountability" sort_id: "au-05.05" priority: "P2" implementation_level: "organization" parent: "AU-05" enhancement: True
Statement
Provide an alternate audit logging capability in the event of a failure in primary audit logging capability that implements {{ insert: param, au-05.05_odp }}.
Guidance
Since an alternate audit logging capability may be a short-term protection solution employed until the failure in the primary audit logging capability is corrected, organizations may determine that the alternate audit logging capability need only provide a subset of the primary audit logging functionality that is impacted by the failure.
Assessment Objective
an alternate audit logging capability is provided in the event of a failure in primary audit logging capability that implements {{ insert: param, au-05.05_odp }}.
Audit and accountability policy
procedures addressing response to audit processing failures
system design documentation
system security plan
privacy plan
system configuration settings and associated documentation
system audit records
other relevant documents or records
Organizational personnel with audit and accountability responsibilities
organizational personnel with information security and privacy responsibilities
system/network administrators
system developers
Alternate audit logging capability