The level of audit has not been established or the audit logs being collected for the devices and print spoolers are not being reviewed.
An XCCDF Rule
Description
<VulnDiscussion>If inadequate information is captured in the audit, the identification and prosecution of malicious user will be very difficult. If the audits are not regularly reviewed suspicious activity may go undetected for a long time. Therefore, the level of auditing for MFDs, printers, and print spoolers must be defined and personnel identified to review the audit logs. </VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility>Information Assurance Officer</Responsibility><IAControls>ECAR-1, ECAR-2, ECAR-3, ECAT-1, ECAT-2</IAControls>
- ID
- SV-7024r2_rule
- Severity
- Low
- Updated
Remediation - Manual Procedure
Define the level of auditing and identify personnel responsible for reviewing audit logs of MFDs, printers, and print spoolers.