| AU-4 | Audit and Accountability | Audit Log Storage Capacity |
| AU-4(1) | Audit and Accountability | Transfer to Alternate Storage |
| AU-5 | Audit and Accountability | Response to Audit Logging Process Failures |
| AU-5(1) | Audit and Accountability | Storage Capacity Warning |
| AU-5(2) | Audit and Accountability | Real-time Alerts |
| AU-5(3) | Audit and Accountability | Configurable Traffic Volume Thresholds |
| AU-5(4) | Audit and Accountability | Shutdown on Failure |
| AU-5(5) | Audit and Accountability | Alternate Audit Logging Capability |
| AU-6 | Audit and Accountability | Audit Record Review, Analysis, and Reporting |
| AU-6(1) | Audit and Accountability | Automated Process Integration |
| AU-6(10) | Audit and Accountability | Audit Level Adjustment |
| AU-6(2) | Audit and Accountability | Automated Security Alerts |
| AU-6(3) | Audit and Accountability | Correlate Audit Record Repositories |
| AU-6(4) | Audit and Accountability | Central Review and Analysis |
| AU-6(5) | Audit and Accountability | Integrated Analysis of Audit Records |
| AU-6(6) | Audit and Accountability | Correlation with Physical Monitoring |
| AU-6(7) | Audit and Accountability | Permitted Actions |
| AU-6(8) | Audit and Accountability | Full Text Analysis of Privileged Commands |
| AU-6(9) | Audit and Accountability | Correlation with Information from Nontechnical Sources |
| AU-7 | Audit and Accountability | Audit Record Reduction and Report Generation |
| AU-7(1) | Audit and Accountability | Automatic Processing |
| AU-7(2) | Audit and Accountability | Automatic Sort and Search |
| AU-8 | Audit and Accountability | Time Stamps |
| AU-8(1) | Audit and Accountability | Synchronization with Authoritative Time Source |
| AU-8(2) | Audit and Accountability | Secondary Authoritative Time Source |
| AU-9 | Audit and Accountability | Protection of Audit Information |
| AU-9(1) | Audit and Accountability | Hardware Write-once Media |
| AU-9(2) | Audit and Accountability | Store on Separate Physical Systems or Components |
| AU-9(3) | Audit and Accountability | Cryptographic Protection |
| AU-9(4) | Audit and Accountability | Access by Subset of Privileged Users |
| AU-9(5) | Audit and Accountability | Dual Authorization |
| AU-9(6) | Audit and Accountability | Read-only Access |
| AU-9(7) | Audit and Accountability | Store on Component with Different Operating System |
| CA-1 | Assessment, Authorization, and Monitoring | Policy and Procedures |
| CA-2 | Assessment, Authorization, and Monitoring | Control Assessments |
| CA-2(1) | Assessment, Authorization, and Monitoring | Independent Assessors |
| CA-2(2) | Assessment, Authorization, and Monitoring | Specialized Assessments |
| CA-2(3) | Assessment, Authorization, and Monitoring | Leveraging Results from External Organizations |
| CA-3 | Assessment, Authorization, and Monitoring | Information Exchange |
| CA-3(1) | Assessment, Authorization, and Monitoring | Unclassified National Security System Connections |
| CA-3(2) | Assessment, Authorization, and Monitoring | Classified National Security System Connections |
| CA-3(3) | Assessment, Authorization, and Monitoring | Unclassified Non-national Security System Connections |
| CA-3(4) | Assessment, Authorization, and Monitoring | Connections to Public Networks |
| CA-3(5) | Assessment, Authorization, and Monitoring | Restrictions on External System Connections |
| CA-3(6) | Assessment, Authorization, and Monitoring | Transfer Authorizations |
| CA-3(7) | Assessment, Authorization, and Monitoring | Transitive Information Exchanges |
| CA-4 | Assessment, Authorization, and Monitoring | Security Certification |
| CA-5 | Assessment, Authorization, and Monitoring | Plan of Action and Milestones |
| CA-5(1) | Assessment, Authorization, and Monitoring | Automation Support for Accuracy and Currency |
| CA-6 | Assessment, Authorization, and Monitoring | Authorization |