CA Common Services Started task will be properly defined to the Started Task Table ACID for Top Secret.
An XCCDF Rule
Description
<VulnDiscussion>Access to product resources should be restricted to only those individuals responsible for the application connectivity and who have a requirement to access these resources. Improper control of product resources could potentially compromise the operating system, ACP, and customer data.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility>Information Assurance Officer</Responsibility><Responsibility>Systems Programmer</Responsibility><IAControls>ECCD-1, ECCD-2</IAControls>
- ID
- SV-40860r1_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
The IAO working with the systems programmer will ensure the CA Common Services Started Task(s) is properly identified and/or defined to the System ACP.
A unique ACID must be assigned for the CA Common Services started task(s) thru a corresponding STC table entry.
The following commands are provided as a sample for defining Started Task(s):