AU-5 Response to Audit Processing Failures
Last Review: 10/1/22
Statement
West Texas A&M University information systems must alert designated organizational officials in the event of an audit processing failure. WTAMU information systems must be configured to take appropriate actions during an audit log failure.
Applicability
This Control applies to all West Texas A&M network information resources. The intended audience for this Control includes all information resource owners, custodians, and users of information resources.
Implementation
- Custodians shall ensure that information resources are configured to:
- Send alerts in the event of an audit failure
- Sent alerts once the maximum storage capacity for audit logs is reached.
- Custodians shall ensure information resources shall overwrite the oldest audit records or automatically shut down to eliminate the change of an incident in the absence of auditing and accountability.