← AU-16
AU-16(3) AU · Audit and Accountability

Disassociability

LOW MODERATE HIGH
0 Overlays 0 Related Controls
Graph
Export ▾

Requirements NIST SOURCE

Implement [measures] to disassociate individuals from audit information transmitted across organizational boundaries.

Discussion (NIST Supplemental Guidance)

Preserving identities in audit trails could have privacy ramifications, such as enabling the tracking and profiling of individuals, but may not be operationally necessary. These risks could be further amplified when transmitting information across organizational boundaries. Implementing privacy-enhancing cryptographic techniques can disassociate individuals from audit information and reduce privacy risk while maintaining accountability.

Implementation Guidance

Engineering Interpretation

Original engineering commentary written for this explorer — not NIST source text and not authoritative guidance.

No engineering interpretation has been authored for AU-16(3) yet. This section is architected to receive it — see the Requirements and Assessment sections above for the authoritative NIST source content in the meantime.

Assessment

NIST SP 800-53A REV 5.2.0

Assessment Objectives

  1. measures to disassociate individuals from audit information transmitted across organizational boundaries are defined;
  2. <AU-16(03)_ODP measures> are implemented to disassociate individuals from audit information transmitted across organizational boundaries.

Examine

[SELECT FROM: Audit and accountability policy; system security plan; privacy plan; procedures addressing cross-organizational sharing of audit information; policy and/or procedures regarding the deidentification of PII; system design documentation; system configuration settings and associated documentation; system audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for sharing cross-organizational audit information; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Mechanisms implementing disassociability].

STIGs & CCIs

No STIG checks or CCI mappings are currently loaded for AU-16(3). This section is architected to display, per product: STIG ID, Finding ID, Severity, Title, Description, Check, Fix, CCI, and NIST control mapping — but nothing is populated here until a real DISA STIG/CCI dataset is ingested.

Learn more about STIG/CCI integration →

Evidence

Potential Evidence — Derived

Categorized from the SP 800-53A "Examine"/"Test" artifact list above by keyword — not an authoritative NIST evidence list.

Policy

  • Audit and accountability policy
  • system security plan
  • privacy plan
  • policy and/or procedures regarding the deidentification of PII

Configuration

  • system design documentation
  • system configuration settings and associated documentation

Testing

  • Mechanisms implementing disassociability

Other Records

  • procedures addressing cross-organizational sharing of audit information
  • system audit records
  • other relevant documents or records