> ## Documentation Index
> Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt
> Use this file to discover all available pages before exploring further.

# NIST CSC Control PR.PT-1: Audit/Log Records are Determined, Documented, Implemented, and Reviewed in Accordance with Policy

|                       |           |                  |             |             |
| --------------------- | --------- | ---------------- | ----------- | ----------- |
| **Role Availability** | Read-Only | **Investigator** | **Analyst** | **Manager** |

**Protective Technology (PR.PT)**: Technical security solutions are managed to ensure the security and resilience of systems and assets, consistent with related policies, procedures, and agreements. This control can be partially satisfied by having logs available in USM Anywhere for log review. The user is responsible for their own log review process for the rest of the control.

**Associated Frameworks**: CCS CSC 14, COBIT 5 APO11.04, ISA 62443-2-1:2009 4.3.3.3.9, 4.3.3.5.8, 4.3.4.4.7, 4.4.2.1, 4.4.2.2, 4.4.2.4, ISA 62443-3-3:2013 SR 2.8, SR 2.9, SR 2.10, SR 2.11, SR 2.12, ISO/IEC 27001:2013 A.12.4.1, A.12.4.2, A.12.4.3, A.12.4.4, A.12.7.1, NIST SP 800-53 Rev. 4 AU Family

This report presents audit records logged in the USM Anywhere platform.

**Filters used by NIST CSC Control PR.PT-1: Audit/Log Records Are Determined, Documented, Implemented, and Reviewed in Accordance with Policy**

| Filter     | Value |
| ---------- | ----- |
| Suppressed | False |

**To generate the NIST CSC Control PR.PT-1 report**

1. Go to **Reports > Compliance Templates**.
2. On the left navigation pane, click **NIST CSF**.
3. Click **Generate Report** on the specific line for this report. The **Configure Report** dialog box appears.
4. Click **Edit Filters** if you want to modify the selected filters, and then click **Continue to Filters**.
5. Make the required modifications, and then click **Edit Report**.
6. Click the date field if you want to choose a different date range. Select **Last Hour**, **Last 24 Hours**, **Last 7 Days**, **Last 30 Days**, **Last 90 Days**, or **Custom Range** to set a particular date range.

   <Frame>
     <img src="https://mintcdn.com/levelblue-5324744e/58jWJ18C3bcpNz-l/images/usm-anywhere/datepicker.webp?fit=max&auto=format&n=58jWJ18C3bcpNz-l&q=85&s=754e4ed5350ec313fb184c52f50a6d84" alt="" width="200" height="204" data-path="images/usm-anywhere/datepicker.webp" />
   </Frame>
7. Select the **Format** of the report. It can either be **CSV** or **PDF**.
8. Select a **Schedule** for the report if you want to generate it again: **Daily**, **Weekly**, **Bi-weekly**, and **Monthly**. Otherwise, select **Never**.
9. Enter an email address in which to send the report. You may also select the **Send to my Email Address** option to add your email address automatically.
10. Select the **Enable link expiration** option.

    <Note>
      This link is delivered by email and expires in 14 days.
    </Note>
11. Click **Next**.
12. In the **Report Name** field, enter a name for the report. This name will be displayed on the **Saved Reports** page.
13. **(OPTIONAL)** Enter a **Report Description**.
14. Under the **Number of Records** section, select the maximum number of records to include in the report: **20**, **50**, **100**, **500**, **1000**, or **2500**.
15. If you have previously chosen the **PDF** format, you will see the **Graphs** section, which you can use to include additional views. You can add to or remove graphs from the report by clicking the  <img src="https://mintcdn.com/levelblue-5324744e/h05grHs2-GuNWffi/images/usm-anywhere/arrow-right.svg?fit=max&auto=format&n=h05grHs2-GuNWffi&q=85&s=3db5770e085275538949814d89b983b9" className="inline" width="20" height="20" data-path="images/usm-anywhere/arrow-right.svg" /> and <img src="https://mintcdn.com/levelblue-5324744e/yWllrh2N4cA-lI7S/images/usm-central/arrow-left.svg?fit=max&auto=format&n=yWllrh2N4cA-lI7S&q=85&s=8f4b65fc211f85dc8cd76980562ac066" className="inline" width="20" height="20" data-path="images/usm-central/arrow-left.svg" /> icons.
16. Click **Run** to run the report.

    <Tip>
      Click **Save & Run** if you wish to keep the report in your [Saved Reports on USM Anywhere](/documentation/usm-anywhere/user-guide/reports/saved-reports) page and receive the report in the indicated email.
    </Tip>
