diff --git a/tasks/post.yml b/tasks/post.yml
index c5f225f..973e22d 100644
--- a/tasks/post.yml
+++ b/tasks/post.yml
@@ -38,6 +38,7 @@
   changed_when: true
   check_mode: false
   when:
+      - "'auditd' in ansible_facts.packages"
       - rhel9cis_rule_4_1_3 or
         rhel9cis_rule_4_1_4 or
         rhel9cis_rule_4_1_5 or