This objective requires your organization to assign and document responsibility for managing the audit logging process, including the collection, configuration, review, protection, and retention of logs—especially on systems handling Controlled Unclassified Information (CUI).