Skip to content

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000080-NDM-000220

    <GroupDescription></GroupDescription>
    Group
  • The MQ Appliance network device must protect against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by non-repudiation.

    &lt;VulnDiscussion&gt;This requirement supports non-repudiation of actions taken by an administrator and is required in order to maintain the integ...
    Rule Medium Severity
  • SRG-APP-000108-NDM-000232

    <GroupDescription></GroupDescription>
    Group
  • The MQ Appliance network device must alert the Information System Security Officer (ISSO) and System Administrator (SA) (at a minimum) in the event of an audit processing failure.

    &lt;VulnDiscussion&gt;It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required....
    Rule Medium Severity
  • SRG-APP-000125-NDM-000241

    <GroupDescription></GroupDescription>
    Group
  • The MQ Appliance network device must back up audit records at least every seven days onto a different system or system component than the system or component being audited.

    &lt;VulnDiscussion&gt;Protection of log data includes assuring log data is not accidentally lost or deleted. Regularly backing up audit records to ...
    Rule Medium Severity
  • SRG-APP-000148-NDM-000246

    <GroupDescription></GroupDescription>
    Group
  • The MQ Appliance network device must uniquely identify and authenticate organizational administrators (or processes acting on behalf of organizational administrators).

    &lt;VulnDiscussion&gt;To assure accountability and prevent unauthenticated access to the MQ Appliance, organizational administrators must be unique...
    Rule Medium Severity
  • SRG-APP-000148-NDM-000346

    <GroupDescription></GroupDescription>
    Group
  • In the event the authentication server is unavailable, the MQ Appliance must provide one local account created for emergency administration use.

    &lt;VulnDiscussion&gt;Authentication for administrative (privileged level) access to the MQ Appliance is required at all times. An account can be c...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules