NIST SP 800-171 A.03.03.01: Event Logging Assessment

Assess that the organization identifies the types of events that the system is capable of logging, specifies the events to be logged within the system, and reviews and updates the list of logged events.

Other controls in Audit and Accountability Assessment

3.3.1 SAD is not stored after authorization, even if encrypted. All sensitive authentication data received is rendered unrecoverable upon completion of the authorization process
SP800-171-3.5.2 Authenticate identities before access

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-171 controls