III - Administrative Sensitive
Rules and Groups employed by this XCCDF Profile
-
The Mainframe Product must either shut down, restart, and/or notify the appropriate personnel when anomalies in the operation of the security functions as defined in site security plan are discovered.
<VulnDiscussion>If anomalies are not acted on, security functions may fail to secure the system. Security function is defined as the hardwa...Rule Medium Severity -
SRG-APP-000475
<GroupDescription></GroupDescription>Group -
The Mainframe product must perform an integrity check of all software from vendors/sources that provide cryptographic mechanisms to enable the validation of code authenticity and integrity at startup, at transitional states as defined in site security plan or security-relevant events, or annually.
<VulnDiscussion>Unauthorized changes to software can occur due to errors or malicious activity (e.g., tampering). Software includes, for exam...Rule Medium Severity -
SRG-APP-000477
<GroupDescription></GroupDescription>Group -
The Mainframe Product must perform an integrity check of information as defined in site security plan at startup, at transitional states as defined in site security plan or security-relevant events, or annually.
<VulnDiscussion>Unauthorized changes to information can occur due to errors or malicious activity (e.g., tampering). Information includes met...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.