AU-9(6)—Protection Of Audit Information

PBMM (P2)

Secret (P2)

Technical

>Control Description

PROTECTION OF AUDIT INFORMATION | READ ONLY ACCESS The organization authorizes read-only access to audit information to ⚙organization-defined subset of privileged users.

>Supplemental Guidance

Restricting privileged user authorizations to read-only helps to limit the potential damage to organizations that could be caused by such users (e.g., deleting audit records to cover up malicious activity).

Ask AI

Configure your API key to use AI features.