AU-6—Audit Record Review, Analysis, and Reporting

Review and analyze system audit records ⚙organization-defined frequency for indications of ⚙organization-defined inappropriate or unusual activity and the potential impact of the inappropriate or unusual activity;

Report findings to ⚙organization-defined personnel or roles; and

Adjust the level of audit record review, analysis, and reporting within the system when there is a change in risk based on law enforcement information, intelligence information, or other credible sources of information.