AAA Services must be configured to automatically generate audit records of the enforcement actions.
An XCCDF Rule
Description
<VulnDiscussion>Organizations log system accesses associated with applying configuration changes to ensure that configuration change control is implemented and to support after-the-fact actions should organizations discover any unauthorized changes.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-263530r982387_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Configure AAA Services to automatically generate audit records of the enforcement actions.