GPOS SRG: General Purpose Operating System Security Requirements Guide
This General Purpose Operating System (GPOS) Security Requirements Guide (SRG) provides the technical security policies and requirements for applying security concepts to systems. This SRG specifies security requirements for commercial-off-the-shelf (COTS) or government- off-the-shelf (GOTS) general purpose operating systems (GPOSs) in networked environments. An operating system conformant to this SRG may be operated as a server system within a data center or a client system used directly by one or more human users. This guide assumes operation within a single security domain. Cross-domain solution (CDS) and Multi-Level Security (MLS) requirements are beyond the scope of this guide.
-
SRG-OS-000032-GPOS-00013
The operating system must monitor remote access methods. -
SRG-OS-000033-GPOS-00014
The operating system must implement DoD-approved encryption to protect the confidentiality of remote access sessions. -
SRG-OS-000037-GPOS-00015
The operating system must produce audit records containing information to establish what type of events occurred. -
SRG-OS-000038-GPOS-00016
The operating system must produce audit records containing information to establish when (date and time) the events occurred. -
SRG-OS-000039-GPOS-00017
The operating system must produce audit records containing information to establish where the events occurred. -
SRG-OS-000040-GPOS-00018
The operating system must produce audit records containing information to establish the source of the events. -
SRG-OS-000041-GPOS-00019
The operating system must produce audit records containing information to establish the outcome of the events. -
SRG-OS-000042-GPOS-00020
The operating system must generate audit records containing the full-text recording of privileged commands. -
SRG-OS-000042-GPOS-00021
The operating system must produce audit records containing the individual identities of group account users. -
SRG-OS-000046-GPOS-00022
The operating system must alert the ISSO and SA (at a minimum) in the event of an audit processing failure.
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.