Protection of Audit Information

frameworkNIST SP 800-53 Rev 5.2 sectionAU Audit and Accountability csf 2.0PR.DS-10 topics— frameworks2 0 3

Official texta. Protect audit information and audit logging tools from unauthorized access, modification, and deletion; and
b. Alert [Assignment: organization-defined personnel or roles] upon detection of unauthorized access, modification, or deletion of audit information.NIST SP 800-53 Rev 5.2 control statement (public domain)

gap from 800-53 → gap to 800-53 →

Wrong or missing mapping? Report it

Equivalents of AU-9 in other frameworks
Framework	Requirement	Title	Link	Source / reason
NIST CSF 2.0	PR.DS-10	The confidentiality, integrity, and availability of data-in-use are protected	Loosely related	No mapping. Only shares CSF PR.DS-10: related, not a mapping
ISO 27001	A.5.33 A.8.15	Protection of records; Logging	Crosswalk	NIST SP 800-53 → ISO 27001 mapping 17 loosely related (not mappings) A.5.3 Segregation of duties Loosely related Only shares CSF PR.DS-10: related, not a mapping A.5.10 Acceptable use of information and other associated assets Loosely related Only shares CSF PR.DS-10: related, not a mapping A.5.13 Labelling of information Loosely related Only shares CSF PR.DS-10: related, not a mapping A.5.14 Information transfer Loosely related Only shares CSF PR.DS-10: related, not a mapping A.5.15 Access control Loosely related Only shares CSF PR.DS-10: related, not a mapping A.5.23 Information security for use of cloud services Loosely related Only shares CSF PR.DS-10: related, not a mapping A.6.1 Screening Loosely related Only shares CSF PR.DS-10: related, not a mapping A.6.2 Terms and conditions of employment Loosely related Only shares CSF PR.DS-10: related, not a mapping …and 9 more in the downloads
CIS v8.1	CIS 3.1 CIS 3.4 CIS 3.5 CIS 3.12	Establish and Maintain a Data Management Process; Enforce Data Retention…	Loosely related	No mapping. Only shares CSF PR.DS-10: related, not a mapping +1 more loosely related (not mappings) CIS 3.13 Deploy a Data Loss Prevention Solution Loosely related Only shares CSF PR.DS-10: related, not a mapping
SOC 2	C1.2 CC6.5 CC6.7	Disposing of confidential information; Protection of data when assets are disposed of…	Loosely related	No mapping. Only shares CSF PR.DS-10: related, not a mapping
PCI DSS	3.2.1 3.4.1 7.2.2 8.2.8	Account data storage minimised, with retention and disposal; PAN masked when displayed…	Loosely related	No mapping. Only shares CSF PR.DS-10: related, not a mapping +1 more loosely related (not mappings) 3.4.2 PAN copying prevented over remote-access technologies Loosely related Only shares CSF PR.DS-10: related, not a mapping
CMMC	AC.L2-3.1.5 AU.L2-3.3.8 AU.L2-3.3.9 CM.L2-3.4.9 SC.L2-3.13.3	Least Privilege; Audit Protection…	Crosswalk	NIST SP 800-171r3 03.01.05 → SP 800-53; NIST SP 800-171r3 03.03.08 → SP 800-53 16 loosely related (not mappings) AC.L2-3.1.1 Authorized Access Control Loosely related Only shares CSF PR.DS-10: related, not a mapping AC.L2-3.1.2 Transaction & Function Control Loosely related Only shares CSF PR.DS-10: related, not a mapping AC.L2-3.1.3 Control CUI Flow Loosely related Only shares CSF PR.DS-10: related, not a mapping MP.L2-3.8.9 Protect Backups Loosely related Only shares CSF PR.DS-10: related, not a mapping SC.L2-3.13.1 Boundary Protection Loosely related Only shares CSF PR.DS-10: related, not a mapping SC.L2-3.13.2 Security Engineering Loosely related Only shares CSF PR.DS-10: related, not a mapping SC.L2-3.13.4 Shared Resource Control Loosely related Only shares CSF PR.DS-10: related, not a mapping SC.L2-3.13.5 Public-Access System Separation Loosely related Only shares CSF PR.DS-10: related, not a mapping …and 8 more in the downloads
HIPAA	§164.308(a)(1)(ii)(D)§164.308(a)(3)§164.308(a)(3)(ii)(A)§164.308(a)(3)(ii)(B)	Information System Activity Review; Workforce Security…	Loosely related	No mapping. Only shares CSF PR.DS-10: related, not a mapping +20 more loosely related (not mappings) §164.308(a)(4) Information Access Management Loosely related Only shares CSF PR.DS-10: related, not a mapping §164.308(a)(4)(ii)(A) Isolating Health care Clearinghouse Function Loosely related Only shares CSF PR.DS-10: related, not a mapping §164.308(a)(4)(ii)(B) Access Authorization Loosely related Only shares CSF PR.DS-10: related, not a mapping §164.308(a)(4)(ii)(C) Access Establishment and Modification Loosely related Only shares CSF PR.DS-10: related, not a mapping …and 16 more in the downloads
GDPR	Art.5(1)(e)Art.5(1)(f)Art.32(1)(b)	Principles relating to processing of personal data; Principles relating to processing of personal data…	Loosely related	No mapping. Only shares CSF PR.DS-10: related, not a mapping
NIS2	—	No requirement	No mapping in our data	No mapping in our data.
Essential Eight	—	No requirement	No mapping in our data	No mapping in our data (Essential Eight links are editorial only).
DORA	Art.9(2)Art.9(3)(c)Art.9(3)(d)	Protection and prevention; Protection and prevention…	Loosely related	No mapping. Only shares CSF PR.DS-10: related, not a mapping
CPS 234	Para 21	Timely controls commensurate with risk and asset life-cycle	Loosely related	No mapping. Only shares CSF PR.DS-10: related, not a mapping
Cyber Essentials	—	No requirement	No mapping in our data	No mapping in our data (Cyber Essentials covers five technical controls only).

Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · Loosely related only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.