NIST 800-53 Rev. 5

AU-9(7): Protection of Audit Information | Store on Component with Different Operating System

Control Text:

Store audit information on a component running a different operating system than the system or component being audited.

Storing auditing information on a system component running a different operating system reduces the risk of a vulnerability specific to the system, resulting in a compromise of the audit records.

Related Controls