CMMC §3.3 AU-2
Event Logging
- Control
- Identify the types of events the system must log and keep that event catalog under review.
- Magellan example
- Magellan publishes a fixed event catalog: SchemaImported, MappingProposed, SemanticSuggestionReturned, SemanticSuggestionAccepted, SemanticSuggestionRejected, ThresholdProfileUpdated, RoleAssigned, ActorAuthenticated. Every catalog change is itself a ledger entry, so the catalog under review is the catalog enforced.
- Evidence the assessor pulls
- ledger.event_catalog view + audit_ledger entries WHERE event_type = 'EventCatalogUpdated'
