Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.3.4

Alert on Audit Logging Failure

Official citation: 3.3.4

Class: core · Severity: medium

Statement of the obligation — verify against source

3.3.4

What it means

Alert the right people when the audit-logging process fails — for example software or hardware errors, a breakdown in the record-capture mechanism, or log storage reaching or exceeding capacity. Apply this to each individual log repository, to your total log-storage capacity, or both.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.