NIST 800-53 rev.5/Audit and Accountability/158 of 1011
AU-05 (04)Response to Audit Logging Process Failures | Shutdown on Failure
Control family: Audit and Accountability
Control description
Invoke a [Selection (one): full system shutdown; partial system shutdown; degraded operational mode with limited mission or business functionality available] in the event of [Assignment: organization-defined audit logging failures], unless an alternate audit logging capability exists.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.