Capacity
CCI-002702
Shut the system down, restart the system, and/or initiate organization-defined alternative action(s) when anomalies in the operation of the organization-defined security functions are discovered.
20
Rule
Severity: Medium
Configure Periodic Execution of AIDE
13
Rule
Severity: Medium
Configure Notification of Post-AIDE Scan Details
2
Rule
Severity: Low
In the event of an error when validating the binding of other DNS servers identity to the BIND 9.x information, when anomalies in the operation of the signed zone transfers are discovered, for the success and failure of start and stop of the name server service or daemon, and for the success and failure of all name server events, a BIND 9.x server implementation must generate a log entry.
3
Rule
Severity: Medium
The DNS server implementation must log the event and notify the system administrator when anomalies in the operation of the signed zone transfers are discovered.
1
Rule
Severity: Medium
The Infoblox DNS server implementation must log the event and notify the system administrator when anomalies in the operation of the signed zone transfers are discovered.
2
Rule
Severity: Medium
The Mainframe Product must either shut down, restart, and/or notify the appropriate personnel when anomalies in the operation of the security functions as defined in site security plan are discovered.
1
Rule
Severity: Medium
Nutanix AOS must be configured to use SELinux Enforcing mode.
2
Rule
Severity: Medium
Prisma Cloud Compute must be configured to send events to the hosts' syslog.
2
Rule
Severity: Medium
The UEM server must alert the system administrator when anomalies in the operation of security functions are discovered.
2
Rule
Severity: Medium
The macOS system must ensure secure boot level set to full.
1
Rule
Severity: Medium
The Ubuntu operating system must notify designated personnel if baseline configurations are changed in an unauthorized manner. The file integrity tool must notify the system administrator when changes to the baseline configuration or anomalies in the operation of any security functions are discovered.
2
Rule
Severity: Medium
The Ubuntu operating system must notify designated personnel if baseline configurations are changed in an unauthorized manner. The file integrity tool must notify the System Administrator when changes to the baseline configuration or anomalies in the operation of any security functions are discovered.
2
Rule
Severity: Medium
The container platform must provide system notifications to the system administrator and operational staff when anomalies in the operation of the organization-defined security functions are discovered.
2
Rule
Severity: Medium
The operating system must shut down the information system, restart the information system, and/or notify the system administrator when anomalies in the operation of any security functions are discovered.
4
Rule
Severity: Medium
IBM z/OS system administrator must develop a procedure to shut down the information system, restart the information system, and/or notify the system administrator when anomalies in the operation of any security functions are discovered.
2
Rule
Severity: Medium
IBM z/OS must shut down the information system, restart the information system, and/or notify the system administrator when anomalies in the operation of any security functions are discovered.
2
Rule
Severity: Medium
The OL 8 file integrity tool must notify the System Administrator (SA) when changes to the baseline configuration or anomalies in the operation of any security functions are discovered within an organizationally defined frequency.
2
Rule
Severity: Medium
OpenShift must configure Alert Manger Receivers to notify SA and ISSO of all audit failure events requiring real-time alerts.
2
Rule
Severity: Medium
The SUSE operating system must notify the System Administrator (SA) when AIDE discovers anomalies in the operation of any security functions.
2
Rule
Severity: Medium
The SUSE operating system must notify the System Administrator (SA) when Advanced Intrusion Detection Environment (AIDE) discovers anomalies in the operation of any security functions.
2
Rule
Severity: Medium
RHEL 9 must routinely check the baseline configuration for unauthorized changes and notify the system administrator when anomalies in the operation of any security functions are discovered.
2
Rule
Severity: Medium
The VMM must shut down, restart, and/or notify the system administrator when anomalies in the operation of any security functions are discovered.
2
Rule
Severity: Medium
The Windows DNS Server must log the event and notify the system administrator when anomalies in the operation of the signed zone transfers are discovered.
2
Rule
Severity: Medium
Configure Systemd Timer Execution of AIDE
2
Rule
Severity: Medium
Configure AIDE To Notify Personnel if Baseline Configurations Are Altered
1
Rule
Severity: Medium
The macOS system must ensure Secure Boot level is set to "full".
1
Rule
Severity: Medium
Ubuntu 22.04 LTS must notify designated personnel if baseline configurations are changed in an unauthorized manner. The file integrity tool must notify the system administrator when changes to the baseline configuration or anomalies in the operation of any security functions are discovered.
1
Rule
Severity: Medium
MKE must be configured to send audit data to a centralized log server.
1
Rule
Severity: Medium
SLEM 5 must notify the system administrator (SA) when Advanced Intrusion Detection Environment (AIDE) discovers anomalies in the operation of any security functions.
1
Rule
Severity: Medium
The TOSS file integrity tool must notify the system administrator when changes to the baseline configuration or anomalies in the operation of any security functions are discovered within an organizationally defined frequency.
Patternfly
PatternFly elements
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Modules