Compliance
NIST 800-53 AU-7 Audit Record Reduction and Reports: What to Show
AU-7 asks for search and reporting on logs without changing the originals. Here is what to demonstrate to an auditor.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
NIST 800-53 AU-6 Audit Record Review: What to Show an Auditor
AU-6 asks that someone actually reads the logs and reports what they find. Here is the evidence, the common gaps and a workable routine.
Oct 18, 20263 min read
Compliance
NIST 800-53 AU-5 Audit Logging Failures: What to Show an Auditor
AU-5 asks what happens when logging breaks. Here is how to alert on failures, decide a safe response and keep evidence that it works.
Oct 18, 20263 min read
Compliance
NIST 800-53 AU-4 Audit Log Storage Capacity: What to Show
AU-4 asks you to size log storage for what you collect and keep. Here is the evidence that shows you will not run out of room.
Oct 18, 20262 min read
Compliance
NIST 800-53 AU-3 Content of Audit Records: What to Show
AU-3 lists what each audit record must contain: what, when, where, source, outcome and who. Here is how to check your logs against it.
Oct 18, 20262 min read
Compliance
NIST 800-53 AU-2 Event Logging: What to Show an Auditor
AU-2 asks which events you log and why that set is enough for investigations. Here is how to choose events, justify them and show the evidence.
Oct 18, 20264 min read
Compliance
NIST 800-53 AU-16 Cross-organizational Audit Logging
AU-16 covers audit logging when requests cross company boundaries. Here is how to keep identity and share logs with partners and providers.
Oct 18, 20262 min read
Compliance
NIST 800-53 AU-15 Withdrawn: Alternate Audit Logging Capability
AU-15 was withdrawn in Rev 5 and moved to AU-5(5). Here is what that means if a framework or questionnaire still cites it.
Oct 18, 20262 min read
Compliance
NIST 800-53 AU-14 Session Audit: What to Show an Auditor
AU-14 covers recording user session content under defined conditions, with legal review. Here is when it applies and how to handle the privacy side.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.