Skip to content
ATO Pathways
  Log In

Unified Endpoint Management Server Security Requirements Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000028

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must automatically audit account disabling actions.

    &lt;VulnDiscussion&gt;When application accounts are disabled, user accessibility is affected. Once an attacker establishes access to an application...
    Rule Medium Severity
    Show

  • SRG-APP-000029

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must automatically audit account removal actions.

    &lt;VulnDiscussion&gt;When application accounts are removed, user accessibility is affected. Once an attacker establishes access to an application,...
    Rule Medium Severity
    Show

  • SRG-APP-000065

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.

    &lt;VulnDiscussion&gt;By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise...
    Rule Medium Severity
    Show

  • SRG-APP-000068

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the application.

    &lt;VulnDiscussion&gt;Display of the DoD-approved use notification before granting access to the application ensures privacy and security notificat...
    Rule Medium Severity
    Show

  • SRG-APP-000069

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must retain the access banner until the user acknowledges acceptance of the access conditions.

    &lt;VulnDiscussion&gt;The banner must be acknowledged by the user prior to allowing the user access to the application. This provides assurance tha...
    Rule Low Severity
    Show

  • SRG-APP-000080

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must protect against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by non-repudiation.

    &lt;VulnDiscussion&gt;Without non-repudiation, it is impossible to positively attribute an action to an individual (or process acting on behalf of ...
    Rule Medium Severity
    Show

  • SRG-APP-000089

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must provide audit record generation capability for DoD-defined auditable events within all application components.

    &lt;VulnDiscussion&gt;Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events r...
    Rule Medium Severity
    Show

  • SRG-APP-000089

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must be configured to provide audit records in a manner suitable for the Authorized Administrators to interpret the information.

    &lt;VulnDiscussion&gt;Successful incident response and auditing relies on timely, accurate system information and analysis in order to allow the or...
    Rule Medium Severity
    Show

  • SRG-APP-000090

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must be configured to allow only specific administrator roles to select which auditable events are to be audited.

    &lt;VulnDiscussion&gt;Without the capability to restrict which roles and individuals can select which events are audited, unauthorized personnel ma...
    Rule Medium Severity
    Show

  • SRG-APP-000091

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must generate audit records when successful/unsuccessful attempts to access privileges occur.

    &lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficu...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules