FBI CJIS Security Policy AU-11: AU-11 Audit Record Retention

Retain audit records for at least one year, or until they are no longer needed for administrative, legal, audit or other operational purposes, to support after-the-fact investigations and meet retention requirements.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in AU: Audit and Accountability – FBI CJIS Security Policy

AU-1 AU-1 Policy and Procedures
AU-12 AU-12 Audit Record Generation
AU-2 AU-2 Event Logging
AU-3 AU-3 Content of Audit Records
AU-3(1) AU-3(1) Content of Audit Records | Additional Audit Information
AU-3(3) AU-3(3) Content of Audit Records | Limit Personally Identifiable Information Elements
AU-4 AU-4 Audit Log Storage Capacity
AU-5 AU-5 Response to Audit Logging Process Failures

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All FBI CJIS Security Policy controls