Under active development Content is continuously updated and improved · Last updated Feb 18, 2026, 2:55 AM UTC
Home / Frameworks / NIST SP 800-171A / 3.3 — Audit and Accountability

3.3 Audit and Accountability

Official SCF Download

38 requirements in the Audit and Accountability family

3.3.1System Auditing Assessment
3.3.1[a]System Auditing Assessment [a]
3.3.1[b]System Auditing Assessment [b]
3.3.1[c]System Auditing Assessment [c]
3.3.1[d]System Auditing Assessment [d]
3.3.1[e]System Auditing Assessment [e]
3.3.1[f]System Auditing Assessment [f]
3.3.2User Accountability Assessment
3.3.2[a]User Accountability Assessment [a]
3.3.2[b]User Accountability Assessment [b]
3.3.3Event Review Assessment
3.3.3[a]Event Review Assessment [a]
3.3.3[b]Event Review Assessment [b]
3.3.3[c]Event Review Assessment [c]
3.3.4Audit Failure Alerting Assessment
3.3.4[a]Audit Failure Alerting Assessment [a]
3.3.4[b]Audit Failure Alerting Assessment [b]
3.3.4[c]Audit Failure Alerting Assessment [c]
3.3.5Audit Correlation Assessment
3.3.5[a]Audit Correlation Assessment [a]
3.3.5[b]Audit Correlation Assessment [b]
3.3.6Audit Reduction and Reporting Assessment
3.3.6[a]Audit Reduction and Reporting Assessment [a]
3.3.6[b]Audit Reduction and Reporting Assessment [b]
3.3.7Authoritative Time Source Assessment
3.3.7[a]Authoritative Time Source Assessment [a]
3.3.7[b]Authoritative Time Source Assessment [b]
3.3.7[c]Authoritative Time Source Assessment [c]
3.3.8Audit Record Protection Assessment
3.3.8[a]Audit Record Protection Assessment [a]
3.3.8[b]Audit Record Protection Assessment [b]
3.3.8[c]Audit Record Protection Assessment [c]
3.3.8[d]Audit Record Protection Assessment [d]
3.3.8[e]Audit Record Protection Assessment [e]
3.3.8[f]Audit Record Protection Assessment [f]
3.3.9Audit Management Assessment
3.3.9[a]Audit Management Assessment [a]
3.3.9[b]Audit Management Assessment [b]