Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.3.3

Review and Update Logged Events

Official citation: 3.3.3

Class: core · Severity: medium

Statement of the obligation — verify against source

3.3.3

What it means

Periodically re-evaluate which events you log. The activity worth capturing changes over time, so review and update your list of logged event types so it stays both necessary and sufficient.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.