Time Stamps (03.03.07)_time-stamps

Time Stamps (03.03.07) Time Stamps

High-Level Description

Family: Audit and Accountability Framework: NIST SP 800-171 Rev 3 Applicability: Systems processing, storing, or transmitting CUI

Use internal system clocks to generate time stamps for audit records. Record time stamps for audit records that meet [organization-defined] and that use Coordinated Universal Time (UTC), have a fixed local time offset from UTC, or include the local time offset as part of the time stamp.

What to Check

• Verify Time Stamps (03.03.07) Time Stamps is implemented for CUI systems
• Review SSP documentation for Time Stamps (03.03.07)
• Validate CMMC Level 2 assessment objective for Time Stamps (03.03.07)
• Confirm POA&M addresses any gaps for Time Stamps (03.03.07)

How to Test

Step 1: Review System Security Plan

Examine the SSP for Time Stamps (03.03.07) implementation description and responsible parties.

Step 2: Assess Implementation

# Verify security controls protecting CUI
# Check access controls, encryption, monitoring as applicable

# For Linux systems:
ls -la /etc/security/ 2>/dev/null
grep -r "CUI\|controlled" /etc/security/ 2>/dev/null

# For cloud:
# Use cloud-audit-mcp tools to assess posture

Step 3: CMMC Assessment Validation

Verify this requirement passes CMMC Level 2 assessment methodology per SP 800-171A Rev 3.

Tools

Remediation Guide

Requirement Statement

Use internal system clocks to generate time stamps for audit records. Record time stamps for audit records that meet [organization-defined] and that use Coordinated Universal Time (UTC), have a fixed local time offset from UTC, or include the local time offset as part of the time stamp.

Supplemental Guidance

Time stamps generated by the system include the date and time. Time is often expressed in Coordinated Universal Time (UTC) — a modern continuation of Greenwich Mean Time (GMT) — or local time with an offset from UTC. The granularity of time measurements refers to the degree of synchronization between system clocks and reference clocks (e.g., clocks synchronizing within hundreds or tens of milliseconds). Organizations may define different time granularities for system components. Time service can be critical to other security capabilities (e.g., access control and identification and authentication), depending on the nature of the mechanisms used to support those capabilities.

Risk Assessment

CWE Categories

References

• NIST SP 800-171 Rev 3
• NIST SP 800-171A Rev 3 (Assessment)
• CMMC Model Overview
• NIST OSCAL Content

Checklist

• SSP documents Time Stamps (03.03.07) implementation
• Evidence of operating effectiveness collected
• POA&M addresses any gaps
• CMMC assessment objective met
• Continuous monitoring active