Provide an alert within [Assignment: organization-defined real-time period] to [Assignment: organization-defined personnel, roles, and/or locations] when the following audit failure events occur: [Assignment: organization-defined audit logging failure events requiring real-time alerts].
|
|
| Control Identifier | AU-5(2) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | Alerts provide organizations with urgent messages. Real-time alerts provide these messages at information technology speed (i.e., the time from event detection to alert occurs in seconds or less). |
| Related Controls | None. |