Protection of Audit Information | AU-9

Description

Information Resource Custodians are responsible for:

• ensuring that audit logs and related tools are protected so only authorized individuals and systems can access them.
• configuring information resources to protect audit information and audit tools from unauthorized access, modification, or deletion; and
• configuring information resources to send alerts to appropriate personnel upon detection of unauthorized access, modification, or deletion of audit information.

Last updated: 5/12/2026