Which NIST 800-53 controls cover AI audit logging?
The Audit and Accountability (AU) control family governs audit logging — AU-2 (event selection), AU-3 (record content), AU-6 (review/analysis), AU-9 (protection of audit information), and AU-10 (non-repudiation) are the load-bearing ones for an AI evidence…
Answer.
The Audit and Accountability (AU) control family governs audit logging — AU-2 (event selection), AU-3 (record content), AU-6 (review/analysis), AU-9 (protection of audit information), and AU-10 (non-repudiation) are the load-bearing ones for an AI evidence trail. The Assessment/Authorization/Monitoring (CA) family covers the recurring re-assessment cadence. Planisphere's sha-256-pinned, Merkle-rooted record gives AU-9/AU-10-style tamper-evidence and non-repudiation for the measurement record; it complements, not replaces, the system's own audit logging.
The mark behind the answer.
Audit & Accountability control family · maps to the evidence record.
Prepare evidence for NIST 800-53 · AU review.
First evidence record within 21 days of access · re-runs in a single business day. Planisphere measures model behaviour and emits a reproducible, sha-pinned record — it does not certify, file, or give legal advice.