AU-5 (2)

Audit and AccountabilityRev 5system

Real-time Alerts

Baselines:High

Control Statement

Provide an alert within [Assignment: real-time period] to [Assignment: personnel, roles, and/or locations] when the following audit failure events occur: [Assignment: audit logging failure events requiring real-time alerts].

Supplemental Guidance

Alerts provide organizations with urgent messages. Real-time alerts provide these messages at information technology speed (i.e., the time from event detection to alert occurs in seconds or less).

CCI Identifiers (5)

CCI-000144The information system provides a real-time alert when organization-defined audit failure events occur.CCI-000147Defines the audit logging failure events requiring real-time alerts.CCI-001856Defines the real-time period in which to provide an alert when organization-defined audit failure events occur.CCI-001857Defines the personnel, roles, and/or locations to receive alerts when organization-defined audit failure events occur.CCI-001858Provide an alert in an organization-defined real-time-period to organization-defined personnel, roles, and/or locations when organization-defined audit failure events requiring real-time alerts occur.

Linked STIG Checks (116)

Across 112 STIGs. Click to expand.

AU-5 (2)

Real-time Alerts

Control Statement

Supplemental Guidance

CCI Identifiers (5)

Assessment Methods

Linked STIG Checks (116)