Requirement
- Protect audit information and audit logging tools from unauthorized access, modification, and deletion.
- Authorize access to management of audit logging functionality to only a subset of privileged users or roles.
Explanation
Audit information includes the information needed to successfully audit systemactivity, such as audit records, audit log settings, audit reports, and personally identifiable information. Audit logging tools are programs and devices used to conduct audit and logging activities. The protection of audit information focuses on technical protection and limits the ability to access and execute audit logging tools to authorized individuals. The physical protection of audit information is addressed by media and physical protection requirements.
