AU.L2-3.3.1 System Auditing — Create/retain audit logs for monitoring unauthorized activity
AU.L2-3.3.2 User Accountability — Trace actions to individual users
AU.L2-3.3.3 Event Review — Review and update logged events
AU.L2-3.3.4 Audit Failure Alerting — Alert on audit logging failures
AU.L2-3.3.5 Audit Correlation — Correlate audit records for investigation
AU.L2-3.3.6 Reduction & Reporting — Provide on-demand analysis and reporting
AU.L2-3.3.7 Authoritative Time Source — Synchronize clocks with authoritative source
AU.L2-3.3.8 Audit Protection — Protect audit info from unauthorized access/modification/deletion
AU.L2-3.3.9 Audit Management — Limit audit log management to privileged users