Key Security Events for CMMC Compliance
Account Logon
Credential Validation
Kerberos Authentication Service
Kerberos Service Ticket Operations
Account Management
Security Group Management
User Account Management
Detailed Tracking
Process Creation
Logon/Logoff
Logon
Logon, Account Lockout
Other Logon/Logoff Events
Policy Change
Authentication Policy Change
Authorization Policy Change
System
Security State Change
System Integrity
Internal resources allocated for the queuing of audit messages have been exhausted, leading to the loss of some audits
Audit Policy Requirements
| Category | Subcategory | Audit Type |
|---|---|---|
| Policy Change | Authentication Policy Change | Success |
| Policy Change | Authorization Policy Change | Success |
| Account Logon | Credential Validation | Success, Failure |
| Account Logon | Kerberos Authentication Service | Failure |
| Account Logon | Kerberos Service Ticket Operations | Success, Failure |
| Logon/Logoff | Logon | Success |
| Logon/Logoff | Logon, Account Lockout | Failure |
| Logon/Logoff | Other Logon/Logoff Events | Success |
| Detailed Tracking | Process Creation | Success |
| Account Management | Security Group Management | Success |
| System | Security State Change | Success |
| System | System Integrity | Success |
| Account Management | User Account Management | Success |