SRS-065: Audit System Failure Handling
Identifier
SRS-065
Software System
- Audit Service
- Monitoring & Alerting Service
- All services that generate audit events
Category
- Security
- System Resilience
- Functional
Description
In the event of an audit system failure, the primary device functionality shall enter a fail-safe state to prevent any unaudited activity.
- Failure detection: The system must be able to detect a failure in the audit logging mechanism in real-time. A failure is defined as the inability of the Audit Service to receive, process, or securely store an audit record.
- Fail-Safe state: Upon detection of an audit system failure, the system shall immediately enter a pre-defined fail-safe state. This state must, at a minimum, consist of:
- Halting all operations that require auditing until the audit service is restored.
- Alternatively, providing a clear, unambiguous, and persistent warning to any active user that their actions are not being recorded.
- Resumption of normal operations: The system shall only exit the fail-safe state and resume normal operations once the audit service is fully restored and its operational integrity is verified. The transition out of the fail-safe state must itself be a logged event.
Derived from PRS
PRS-0MC: Comprehensive secure audit trails for user interactions