AU-9 Protection of Audit Information

Description

Audit information includes all information (e.g., audit records, audit settings, and audit reports) needed to successfully audit information system activity.

This Control focuses on technical protection of audit information.

Physical protection of audit information is addressed by media protection controls and physical and environmental protection controls.

Applicability

This Control applies to all TAMU-CC University information resources containing controlled or confidential information.

The intended audience is all individuals who are responsible for the installation of new information resources, the operations of existing information resources, and individuals accountable for information resources security.

Implementation

The information system protects audit information and audit tools from unauthorized access, modification, and/or deletion. 

Revision History

Last Updated: February 21, 2025

Previous Versions:

  • June 29, 2023
  • May 31, 2022
  • March 25, 2021
  • September 16, 2019