NIST 800-53 Rev. 5

AU-6(4): Audit Record Review, Analysis, and Reporting | Central Review and Analysis

Control Text:

Provide and implement the capability to centrally review and analyze audit records from multiple components within the system.

Automated mechanisms for centralized reviews and analyses include Security Information and Event Management products.

Related Controls