AU.L2-3.3.6
Reduction & Reporting
Source and approval
CMMC Assessment Guide — Level 2 · Revision 2.13
Publisher approved · Complete cited source edition 2026-10-31
Read the official guideSee AU.L2-3.3.6 in the reference catalog with its NIST cross-references
Official requirement
Provide audit record reduction and report generation to support on- demand analysis and reporting.
Assessment objectives
a. an audit record reduction capability that supports on-demand analysis is provided; and
b. a report generation capability that supports on-demand reporting is provided.
Implementation guidance
Editorial examples to help you plan. Adapt them to your environment; the official requirement and objectives remain authoritative.
In plain language
Provide ways to reduce audit data and generate useful reports while preserving needed records.
Implementation example
Example from the source assessment guide (not a mandatory implementation): You are in charge of IT operations in a company that processes CUI. You are responsible for providing audit record reduction and report generation capability. To support this function, you deploy an open-source solution that will collect and analyze data for signs of anomalies. The solution queries your central log repository to extract relevant data and provide you with a concise and comprehensive view for further analysis to identify potentially malicious activity [a]. In addition to creating on- demand data sets for analysis, you create customized reports explaining the contents of the data set [b].
Evidence examples
Examples suggested by the source guide (not an exhaustive or mandatory checklist): Audit and accountability policy; procedures addressing audit record reduction and report generation; system design documentation; system security plan; system configuration settings and associated documentation; audit record reduction, review, analy sis, and reporting tools; system audit logs and records; other relevant documents or records
Common mistakes
Overwriting original records when creating summaries or filtered reports.