3.3.1, System Auditing

Organization's struggle with documenting NIST SP 800-171's 3.3.1 [...]