QuestionQ215Verified/Security OperationsCopy linkReport a problemAsk AstroTutorSave questionWhat is the PRIMARY reason for choosing the appropriate level of detail for audit-record generation?AAvoid lengthy audit reportsBEnable generation of corrective action reportsCFacilitate a root cause analysis (RCA)DLower costs throughout the System Development Life Cycle (SDLC)Show AnswerAnswerExplanationAppropriate audit-record detail enables investigators to correlate events, reconstruct activity, and identify the underlying cause of a problem. NIST guidance states that selecting the appropriate level of abstraction for audit records can facilitate identification of root causes.Learn moreNIST SP 800-171A Draft — Supplemental Guidance for Audit and Accountability RequirementsShow comments7Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion