AC.L2-3.3.7[b] — Audit & Accountability (Authoritative Time Source)Domain: Audit & Accountability (AU) | Practice: AU.L2-3.3.7 | Objective ID: 3.3.7[b] | Source: NIST SP 800-171 Rev. 2 / CMMC 2.0 Level 2 | Assessment Objective: Time stamps in audit records can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT). |
Executive Summary (For Leadership and the Board)
CMMC objective AC.L2-3.3.7[b] sits inside the Audit & Accountability domain (AU.L2-3.3.7 — Authoritative Time Source) and reads: Time stamps in audit records can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).. Configure systems to record timestamps in or convertible to UTC/GMT to enable accurate cross-system event correlation, especially for geographically distributed environments. For organizations that handle Controlled Unclassified Information (CUI), this objective is part of the foundation that every downstream control depends on.