Auditability of security-related events is the recording of facts that describe a security-related event in a computing system. These facts include the time and date of the event, the name of the event, the name of the system resources affected by the event, the name of the user who invoked the event, and so forth. The following characteristics are also important:

• An audit record contains the audited resource's security label.
• More selective options are available for audit reports.
• The system can audit any override of labeling on printed output.