Valontir

NIST 800-171 · Audit and Accountability

Requirement 3.3.7

SPRS weight
SPRS weight: 1
POA&M eligibility
POA&M-eligible
Assessment objectives
3 assessment objectives

Official requirement text

Provide a system capability that compares and synchronizes internal system clocks with an authoritative source to generate time stamps for audit records

Assessment objectives

Assessors don’t evaluate the requirement as one sentence; they walk these objectives one by one. Each must be met for the requirement to score.

  1. 3.3.7[a]internal system clocks are used to generate time stamps for audit records.
  2. 3.3.7[b]an authoritative source with which to compare and synchronize internal system clocks is specified.
  3. 3.3.7[c]internal system clocks used to generate time stamps for audit records are compared to and synchronized with the specified authoritative time source.

Inside Valontir, this requirement carries a full plain-English guide: what it asks in normal words, what good looks like in a small shop, the evidence an assessor accepts, the common gaps that cost points, and a plain reading of every assessment objective shown above. See it in a demo.