---

id: "AU-12(01)" title: "System-wide and Time-correlated Audit Trail" family: "AU" family_name: "Audit and Accountability" sort_id: "au-12.01" priority: "P2" implementation_level: "system" parent: "AU-12" enhancement: True

---

Statement

Compile audit records from {{ insert: param, au-12.01_odp.01 }} into a system-wide (logical or physical) audit trail that is time-correlated to within {{ insert: param, au-12.01_odp.02 }}.

Guidance

Audit trails are time-correlated if the time stamps in the individual audit records can be reliably related to the time stamps in other audit records to achieve a time ordering of the records within organizational tolerances.

Assessment Objective

audit records from {{ insert: param, au-12.01_odp.01 }} are compiled into a system-wide (logical or physical) audit trail that is time-correlated to within {{ insert: param, au-12.01_odp.02 }}.

Audit and accountability policy

system security plan

privacy plan

procedures addressing audit record generation

system design documentation

system configuration settings and associated documentation

system-wide audit trail (logical or physical)

system audit records

other relevant documents or records

Organizational personnel with audit record generation responsibilities

organizational personnel with information security and privacy responsibilities

system/network administrators

system developers

Mechanisms implementing audit record generation capability