AU-8 Time Stamps
Description
Time stamps generated by the information system include date and time.
Time is commonly expressed in Coordinated Universal Time (UTC), a modern continuation of Greenwich Mean Time (GMT), or local time with an offset from UTC.
Granularity of time measurements refers to the degree of synchronization between information system clocks and reference clocks, for example, clocks synchronizing within hundreds of milliseconds or within tens of milliseconds. Organizations may define different time granularities for different system components.
Time service can also be critical to other security capabilities such as access control and identification and authentication, depending on the nature of the mechanisms used to support those capabilities.
Applicability
This Control applies to all TAMU-CC University information resources containing controlled or confidential information.
The intended audience is all individuals who are responsible for the installation of new information resources, the operations of existing information resources, and individuals accountable for information resources security.
Implementation
The information system:
- Whenever technically possible, information systems should provide time stamps for use in audit record generation;
- The IRM shall designate a Primary Custodian of the Network Time Service;
- The Primary Custodian of the Network Time Service shall define one or more permitted authoritative time sources (PATS); and
- Records time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT) and meets:
- the system connects to a PATS at least once every 1024 seconds;
- if the system's time and the PAT's time differ by more than 60 seconds, the system's time is updated to match the PAT's time.
Revision History
Last Updated: February 21, 2025
Previous Versions:
- June 29, 2023
- May 31, 2022
- March 25, 2021
- September 16, 2019