Auditting is enabled on the systems and will be tweaked per STIG specs about coverage. The system must have high availability, so having a doomsday switch on audit failure seems inappropriate. Shipping the logs off the system is something that will require coordination with the USNO facility unless the logs can be transferred to an NRAO computer.