Enterprise Audit

Enterprise Audit

Chief Information Officer

IC Technical Specifications

Enterprise Audit


This XML Data Encoding Specification for Enterprise Audit Exchange (AUDIT.XML) defines detailed specifications for using Extensible Markup Language (XML) to encode AUDIT.XML data in compliance with the Intelligence Community Abstract Data Definition (IC.ADD). This Data Encoding Specification (DES) defines the XML elements and attributes, associated structures and relationships, mandatory and cardinality requirements, and permissible values for representing AUDIT.XML data concepts using XML.


This technical specification is linked to Intelligence Community Standard 500-27, Collection and Sharing of Audit Data for Intelligence Community (IC) Information Resources by IC Elements. The technical specification detailed herein is the codification of the payload of an audit record exchange as defined in 500-27. The architecture, interface specifications, design, and implementation of the enterprise audit collection and exchange services are outside the scope of this technical specification. This technical specification only applies to the payload of an audit record exchange.


Compliance with this specification is measured against all aspects of the technical and documentary artifacts contained within the specification release package.


This specification is maintained by the IC Chief Information Officer via the Data Coordination Activity (DCA) and Common Metadata Standards Tiger Team (CMSTT).


Technical Specification Downloads


Latest Approved Public Release: