AU-9: Protection of Audit Information
From NIST's SP800-53:
a. Protect audit information and audit logging tools from unauthorized access, modification, and deletion; and b. Alert [Assignment: organization-defined personnel or roles] upon detection of unauthorized access, modification, or deletion of audit information.
Cyber Threat Graph Context
Explore how this control relates to the wider threat graph