NIST 800-53 rev.5/Audit and Accountability/190 of 1011
AU-12 (03)Audit Record Generation | Changes by Authorized Individuals
Control family: Audit and Accountability
Control description
Provide and implement the capability for [Assignment: organization-defined individuals or roles] to change the logging to be performed on [Assignment: organization-defined system components] based on [Assignment: organization-defined selectable event criteria] within [Assignment: organization-defined time thresholds].
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.