Skip to content

Unified Endpoint Management Agent Security Requirements Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The UEM Agent must be configured to enable the following function: read audit logs of the managed endpoint device.

    Audit logs and alerts enable monitoring of security-relevant events and subsequent forensics when breaches occur. They help identify when the security posture of the device is not as expected. This...
    Rule Medium Severity
  • SRG-APP-000097

    Group
  • SRG-APP-000175

    Group
  • The UEM Agent must not install policies if the policy-signing certificate is deemed invalid.

    It is critical that the UEM agent only use validated certificates for policy updates. Otherwise, there is no assurance that a malicious actor has not inserted itself in the process of packaging the...
    Rule Medium Severity
  • SRG-APP-000176

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules