AU-4 Audit Storage Capacity

Description

Organizations consider the types of auditing to be performed and the audit processing requirements when allocating audit storage capacity. Allocating sufficient audit storage capacity reduces the likelihood of such capacity being exceeded and resulting in the potential loss or reduction of auditing capability.

Applicability

This Control applies to all TAMU-CC University information resources containing essential, controlled, or confidential information.

The intended audience is information resource custodians who are responsible for the installation of new information resources, the operations of existing information resources, and individuals accountable for information resources security.

Implementation

TAMU-CC shall allocate audit record storage capacity to ensure there is sufficient storage capacity to retain at least one years’ worth of log data. TAMU-CC shall allocate sufficient audit record storage capacity and configures auditing to reduce the likelihood of such capacity being exceeded.

Revision History

Last Updated: February 21, 2025

Previous Versions:

  • June 29, 2023
  • May 31, 2022
  • March 25, 2021
  • September 16, 2019