NIST 800-53 r5 · Controls catalogue · Family AU
AU-3Content of Audit Records
Ensure that audit records contain information that establishes the following: What type of event occurred; When the event occurred; Where the event occurred; Source of the event; Outcome of the event; and Identity of any individuals, subjects, or objects/entities associated with the event.
Last updated: 04 July 2026 00:28 UTC
Cumulative inbound coverage
How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.
Collective: full · 9 mapping(s) from 2 framework(s): ASVS 5.0 7 (full) · CSF 2.0 2 (partial)
Implementations targeting this control (13)
- aws-config-cloudtrail-enabled CloudTrail is enabled in the account AWS::CloudTrail::Trail partial detect enforce
- aws-config-vpc-flow-logs-enabled VPC flow logs are enabled AWS::EC2::VPC partial detect enforce CIS §3.7Hub EC2.6
- aws-config-api-gw-execution-logging-enabled Api Gw Execution Logging Enabled AWS::ApiGateway::Stage partial detect enforce
- aws-config-cloud-trail-cloud-watch-logs-enabled Cloud Trail Cloud Watch Logs Enabled AWS::CloudTrail::Trail partial detect enforce
- aws-config-cloudtrail-s3-dataevents-enabled Cloudtrail S3 Dataevents Enabled AWS::CloudTrail::Trail partial detect enforce
- aws-config-elasticsearch-logs-to-cloudwatch Elasticsearch Logs To Cloudwatch AWS::OpenSearchService::Domain partial detect enforce
- aws-config-elb-logging-enabled Elb Logging Enabled AWS::ElasticLoadBalancing::LoadBalancer partial detect enforce
- aws-config-multi-region-cloudtrail-enabled Multi Region Cloudtrail Enabled AWS::CloudTrail::Trail partial detect enforce CIS §3.1Hub CloudTrail.1
- aws-config-opensearch-logs-to-cloudwatch Opensearch Logs To Cloudwatch AWS::OpenSearchService::Domain partial detect enforce
- aws-config-rds-logging-enabled Rds Logging Enabled AWS::RDS::DBInstance partial detect enforce
- aws-config-redshift-cluster-configuration-check Redshift Cluster Configuration Check AWS::Redshift::Cluster partial protect enforce
- aws-config-s3-bucket-logging-enabled S3 Bucket Logging Enabled AWS::S3::Bucket partial detect enforce CIS §3.4Hub CloudTrail.7
- aws-config-wafv2-logging-enabled Wafv2 Logging Enabled AWS::WAFv2::WebACL partial detect enforce
ATT&CK techniques this control mitigates (0)
- No ATT&CK techniques mapped to this control yet.
Weaknesses this control addresses (1)AI
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-778 | Insufficient Logging | 25 | This control directly specifies the minimum content required in audit records to establish event details, attribution, and outcomes, thereby mitigating insufficient logging. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2025-24169 | 5.5 | 7.5 | 0.0071 | good |
CVE-2019-25605 | 5.5 | 7.5 | 0.0027 | good |
CVE-2026-23493 | 5.5 | 8.6 | 0.0039 | good |
CVE-2026-20649 | 5.5 | 7.5 | 0.0023 | good |
CVE-2024-7577 | 3.5 | 4.4 | 0.0029 | good |
CVE-2025-30205 | 5.5 | 7.6 | 0.0027 | good |
CVE-2026-31987 | 5.5 | 7.5 | 0.0074 | good |
CVE-2024-9606 | 5.5 | 7.5 | 0.0071 | good |
CVE-2026-32982 | 5.5 | 7.5 | 0.0042 | good |
CVE-2026-25813 | 5.5 | 7.5 | 0.0026 | partial |
CVE-2026-22782 | 5.5 | 7.5 | 0.0047 | good |
CVE-2023-22649 | 5.5 | 8.4 | 0.0188 | partial |
CVE-2024-57957 | 3.5 | 6.6 | 0.0030 | good |
CVE-2026-25805 | 3.5 | 6.4 | 0.0024 | good |
CVE-2026-22279 | 3.5 | 4.3 | 0.0024 | good |
CVE-2024-20440 | 8.0 | 7.5 | 0.5147 | partial |
CVE-2026-24058 | 7.0 | 9.8 | 0.0053 | good |
CVE-2026-30576 | 5.5 | 7.5 | 0.0026 | partial |
CVE-2026-6947 | 5.5 | 7.5 | 0.0045 | partial |
CVE-2025-30073 | 5.5 | 7.5 | 0.0034 | partial |
CVE-2026-32971 | 5.5 | 7.1 | 0.0027 | partial |
CVE-2026-22168 | 3.5 | 6.5 | 0.0041 | good |
CVE-2025-52644 | 3.5 | 5.8 | 0.0014 | good |
CVE-2026-33417 | 3.5 | 6.5 | 0.0026 | partial |