DISA Control Correlation Identifier (CCI)

CCI-000163 requires that “The information system protects audit information from unauthorized modification.” This Control Correlation Identifier (CCI) was published on...

CCI-000164 requires that “The information system protects audit information from unauthorized deletion.” This Control Correlation Identifier (CCI) was published on...

CCI-000165 requires that “The information system writes audit records to hardware-enforced, write-once media.” This Control Correlation Identifier (CCI) was published...

CCI-000166 requires that “The information system protects against an individual (or process acting on behalf of an individual) falsely denying...

CCI-000167 requires that “The organization retains audit records for an organization-defined time period to provide support for after-the-fact investigations of...

CCI-000168 requires that “The organization defines the time period for retention of audit records, which is consistent with its records...

CCI-000169 requires that “The information system provides audit record generation capability for the auditable events defined in AU-2 a. at...

CCI-000170 requires that “The organization implements a process for ensuring that plans of action and milestones for the security program...

CCI-000171 requires that “The information system allows organization-defined personnel or roles to select which auditable events are to be audited...

CCI-000172 requires that “The information system generates audit records for the events defined in AU-2 d. with the content defined...