Control: The information system provides an audit reduction and report generation capability.

Supplemental Guidance: Audit reduction, review, and reporting tools support after-the-fact investigations of security incidents without altering original audit records.

Control Enhancements:

(1) The information system provides the capability to automatically process audit records for events

of interest based upon selectable, event criteria.

Baseline: LOW Not Selected MOD AU-7 (1) HIGH AU-7 (1)

Family: Audit And Accountability

Class: Technical

ISO 17799 mapping: 10.10.3

COBIT 4.1 mapping: None.