Maintaining the auditing system
Archiving audit information
Recovering audit information from system memory