How the Time on your Computer Affects NIST SP 800-171 Compliance
By: Omer Kaan Aslim
November 25, 2021
There are many intricate requirements related to NIST SP 800-171 including how time on your computer is calculated.
Which NIST SP 800-171 is related to time?
NIST SP 800-171 Security control 3.3.7 states “Provide a system capability that compares and synchronizes internal system clocks with an authoritative source to generate time stamps for audit records.”
How to Meet NIST SP 800-171 3.3.7 Requirement
To meet this requirement you need to ensure that your information system components such as laptops, desktops, network devices, and servers are synchronized with an “authoritative” time source. The best example and the solution you should probably use as an authoritative time source is time.nist.gov.
Configure your laptops, desktops, network devices, and servers to sync their system clocks with time.nist.gov. To learn how to do this simply perform an online search on how to set the system time server for a given device.
Why this Requirements is Important
If your system does not keep accurate time they will incorrectly create time stamps for audit logs. This inhibits your ability to investigate security incidents. Imagine if all of your systems have different times? It will be very difficult to correlate events from one system to another. Performing an investigation into a cyber incident is extremely difficult if system times are not synchronized with an authoritative time source.
Discover Our NIST SP 800-171 Solutions:
For contractors seeking compliance
For IT service providers
Supply Chain Verifier
For contractors seeking to verify partner compliance