NIST 800-53 rev.5/Audit and Accountability/155 of 1011
AU-05 (01)Response to Audit Logging Process Failures | Storage Capacity Warning
Control family: Audit and Accountability
Control description
Provide a warning to [Assignment: organization-defined personnel, roles, and/or locations] within [Assignment: organization-defined time period] when allocated audit log storage volume reaches [Assignment: organization-defined percentage] of repository maximum audit log storage capacity.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.