AU-2
Audit Events
Audit and Accountability
The information system generates audit records for the events defined in AU-2 a. through AU-2 d.
High PriorityAI-Relevant Control
Purpose
Generate comprehensive audit records to support security monitoring and incident response.
AI Relevance
Critical for auditing AI system usage, tracking model access, monitoring inference requests, and supporting AI security incident response.
Implementation Guidance
Configure comprehensive logging for all security-relevant events, implement centralized log management, and ensure log integrity.
Assessment
Test audit logging, verify log completeness, review audit records, and validate log protection mechanisms.
Requirements
- 1Generate audit records for successful and unsuccessful account logon events
- 2Generate audit records for successful and unsuccessful account management events
- 3Generate audit records for successful and unsuccessful object access events
- 4Generate audit records for successful and unsuccessful policy change events
- 5Generate audit records for successful and unsuccessful privilege use events
- 6Generate audit records for successful and unsuccessful process tracking events
- 7Generate audit records for successful and unsuccessful system calls
- 8Generate audit records for successful and unsuccessful system events
- 9Generate audit records for successful and unsuccessful system restarts
- 10Generate audit records for successful and unsuccessful system shutdowns
Framework Context
NIST 800-53 Rev 5
Security and Privacy Controls for Federal Information Systems
Official Documentation →