Skip to content
ATO Pathways
  Log In

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000089

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must be configured to provide audit records in a manner suitable for the Authorized Administrators to interpret the information.

    &lt;VulnDiscussion&gt;Successful incident response and auditing relies on timely, accurate system information and analysis in order to allow the or...
    Rule Medium Severity
    Show

  • SRG-APP-000090

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must be configured to allow only specific administrator roles to select which auditable events are to be audited.

    &lt;VulnDiscussion&gt;Without the capability to restrict which roles and individuals can select which events are audited, unauthorized personnel ma...
    Rule Medium Severity
    Show

  • SRG-APP-000091

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must generate audit records when successful/unsuccessful attempts to access privileges occur.

    &lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficu...
    Rule Medium Severity
    Show

  • SRG-APP-000092

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must initiate session auditing upon startup.

    &lt;VulnDiscussion&gt;If auditing is enabled late in the startup process, the actions of some start-up processes may not be audited. Some audit sys...
    Rule Medium Severity
    Show

  • SRG-APP-000095

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must be configured to produce audit records containing information to establish what type of events occurred.

    &lt;VulnDiscussion&gt;Without establishing what type of event occurred, it would be difficult to establish, correlate, and investigate the events r...
    Rule Medium Severity
    Show

  • SRG-APP-000096

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must be configured to produce audit records containing information to establish when (date and time) the events occurred.

    &lt;VulnDiscussion&gt;Without establishing when events occurred, it is impossible to establish, correlate, and investigate the events relating to a...
    Rule Medium Severity
    Show

  • SRG-APP-000097

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must be configured to produce audit records containing information to establish where the events occurred.

    &lt;VulnDiscussion&gt;Failure to generate these audit records makes it more difficult to identify or investigate attempted or successful compromise...
    Rule Medium Severity
    Show

  • SRG-APP-000098

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must be configured to produce audit records containing information to establish the source of the events.

    &lt;VulnDiscussion&gt;Without establishing the source of the event, it is impossible to establish, correlate, and investigate the events leading up...
    Rule Medium Severity
    Show

  • SRG-APP-000099

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must be configured to produce audit records that contain information to establish the outcome of the events.

    &lt;VulnDiscussion&gt;Without information about the outcome of events, security personnel cannot make an accurate assessment as to whether an attac...
    Rule Medium Severity
    Show

  • SRG-APP-000100

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UEM server must be configured to generate audit records containing information that establishes the identity of any individual or process associated with the event.

    &lt;VulnDiscussion&gt;Without information that establishes the identity of the subjects (i.e., users or processes acting on behalf of users) associ...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules