Director of Central Intelligence Directives (DCID), and the DIA Manual (DIAM)
DCID/DIAM provides uniform policy guidance and requirements associated with the protection of categories of information which are designated as sensitive material. Such material generally is associated with security markings, and will be stored in a Sensitive Compartmented Information Facilities (SCIF).
The Snare Server, from InterSect Alliance, provides a centralised collection, analysis, reporting and archival function for a variety of audit log sources, and is used by several organisations to meet federal guidelines associated with DCID/DIAM, in the US, and equivalents in other countries - such as ACSI 33 in Australia.