Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.3.6

Provide Audit Reduction and Reporting

Official citation: 3.3.6

Class: core · Severity: low

Statement of the obligation — verify against source

3.3.6

What it means

Provide the ability to reduce audit records and generate reports so analysts can investigate on demand. Audit-record reduction organizes collected data into more meaningful summaries (for example, using data-mining filters to spot anomalous behavior), and report generation produces customizable reports. Consistent, fine-grained timestamps matter for ordering records correctly.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.