Compliance
NIST 800-53 AU-13 Monitoring for Information Disclosure
AU-13 asks you to watch for your data leaking onto public sites. Here is what to monitor, who to notify and the evidence to keep.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
NIST 800-53 AU-12 Audit Record Generation: What to Show
AU-12 requires systems to produce audit records for the events you chose. Here is how to prove each component really generates them.
Oct 18, 20262 min read
Compliance
NIST 800-53 AU-11 Audit Record Retention: What to Show
AU-11 asks you to keep logs long enough for investigations and legal needs. Here is how to set a period, prove it and avoid common retention gaps.
Oct 18, 20262 min read
Compliance
NIST 800-53 AU-10 Non-repudiation: What to Show an Auditor
AU-10 asks for evidence that a person really performed an action, so they cannot later deny it. Here is how to build that for approvals and changes.
Oct 18, 20262 min read
Compliance
NIST 800-53 AU-1 Audit Policy and Procedures: What to Show
AU-1 requires a written audit and accountability policy and procedures. Here is what each must cover and the review evidence auditors ask for.
Oct 18, 20262 min read
Compliance
NIST 800-53 AT-6 Training Feedback: What to Show an Auditor
AT-6 asks you to report training results to the right people. Here is what that report should contain and why failures by key staff matter.
Oct 18, 20262 min read
Compliance
NIST 800-53 AT-5 Withdrawn: Where Security Group Contacts Went
AT-5, Contacts with Security Groups and Associations, was withdrawn in Rev 5 and moved to PM-15. Here is what that means for your audit prep.
Oct 18, 20262 min read
Compliance
NIST 800-53 AT-4 Training Records: What to Show an Auditor
AT-4 is the paper trail for security training. Here is what records to keep, how long, and where small teams usually come up short.
Oct 18, 20263 min read
Compliance
NIST 800-53 AT-3 Role-Based Training: What to Show an Auditor
AT-3 asks for security training matched to what each person actually does. Here is the evidence an auditor wants and the gaps that show up most.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.