VMware Tanzu Application Service Compliance
Tanzu Application Service (TAS for VMs) delegates responsibility for audit logging alerts to the existing enterprise log management system. When appropriately configured, TAS for VMs will forward all activity logging to the designated enterprise log management system, and alerts or triggers for specific events may be established there. All implied requirements for this requirement are satisfied by the TAS for VMs platform.
Control Description
The organization:
- Alerts [Assignment: organization-defined personnel or roles] in the event of an audit processing failure; and
- Takes the following additional actions: [Assignment: organization-defined actions to be taken (e.g., shut down information system, overwrite oldest audit records, stop generating audit records)].
Supplemental Guidance
Audit processing failures include, for example, software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded. Organizations may choose to define additional actions for different audit processing failures (e.g., by type, by location, by severity, or a combination of such factors). This control applies to each audit data storage repository (i.e., distinct information system component where audit records are stored), the total audit storage capacity of organizations (i.e., all audit data storage repositories combined), or both.
