Audit Log
What is Audit Log?
A chronological record of system activities that provides documentary evidence of the sequence of activities affecting a specific operation, procedure, or event. Audit logs are essential for security monitoring, incident investigation, and compliance.
Terms that appear alongside audit log
Each of these is named in at least one of the same controls as audit log. The number is how many controls name both.
- audit 37 shared controls
- accountability 8 shared controls
- integrity 7 shared controls
- nist 7 shared controls
- compliance 5 shared controls
- log management 5 shared controls
- fedramp 4 shared controls
- log retention 4 shared controls
Frameworks that govern audit log
What the standards actually require on audit log
Requirements naming audit log across 6 standards, quoted from the control text.
Collect DNS query audit logs on enterprise assets, where appropriate and supported.
CIS-8.6 · Collect DNS Query Audit Logs →Audit logs for the anti-malware solution are enabled and retained in accordance with Requirement 10.5.1.
5.3.4 · Audit logs for anti-malware enabled →Limit audit log access to authorised staff and record who accessed what, so every access is attributable to an individual.
CCM-LOG-04 · Audit Logs Access and Accountability →Allocate audit log storage capacity to accommodate FedRAMP-defined retention period.
AU-4 · Audit Log Storage Capacity →Audit log protection and retention. Implements CyFun PR.PT-1: audit and log records are protected from unauthorised access, modification and deletion, and retained per policy.
BE-CF-31 · Audit log protection and retention →Allocate audit log storage capacity to accommodate FedRAMP-defined retention period.
AU-4 · Audit Log Storage Capacity →Questions people ask about audit log
What is Audit Log?
Why is Audit Log important for compliance?
Which compliance frameworks address Audit Log?
Where can I learn more about Audit Log?
See how Audit Log applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.