(imported topic written by myudson91)
In a recent training class, one of our engineers was able to purge the Action History audit trail, as a master operator.
Can we please instate sufficient protections to prevent any user, Master Operator or otherwise, from purging their audit trail?
This impairs our ability to meet our NIST 800-53 controls.
Thanks,
Marc