FedRAMP Controls / AU

AU-4 Audit Log Storage Capacity

Family AU
Baselines moderate
Mapped KSIs 1

Control statement

Allocate audit log storage capacity to accommodate {{ insert: param, au-04_odp }}.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators

KSITitleCategory
KSI-MLA-01Security Information and Event Management (SIEM)
Operate a Security Information and Event Management (SIEM) or similar system(s) for centralized, tamper-resistent logging of events, activities, and changes.
Monitoring, Logging, and Auditing