Skip to content
ATO Pathways
  Log In

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000291-AAA-000130

    <GroupDescription></GroupDescription>
    Group
    Show

  • AAA Services must be configured to notify the system administrators and ISSO when accounts are created.

    &lt;VulnDiscussion&gt;Once an attacker establishes access to an application, the attacker often attempts to create a persistent method of re-establ...
    Rule Medium Severity
    Show

  • SRG-APP-000292-AAA-000140

    <GroupDescription></GroupDescription>
    Group
    Show

  • AAA Services must be configured to notify the system administrators and ISSO when accounts are modified.

    &lt;VulnDiscussion&gt;When application accounts are modified, user accessibility is affected. Accounts are utilized for identifying individual user...
    Rule Medium Severity
    Show

  • SRG-APP-000293-AAA-000150

    <GroupDescription></GroupDescription>
    Group
    Show

  • AAA Services must be configured to notify the system administrators and ISSO for account disabling actions.

    &lt;VulnDiscussion&gt;When application accounts are disabled, user accessibility is affected. Accounts are utilized for identifying individual user...
    Rule Medium Severity
    Show

  • SRG-APP-000294-AAA-000160

    <GroupDescription></GroupDescription>
    Group
    Show

  • AAA Services must be configured to notify the system administrators and ISSO for account removal actions.

    &lt;VulnDiscussion&gt;When application accounts are removed, user accessibility is affected. Accounts are utilized for identifying users or for ide...
    Rule Medium Severity
    Show

  • SRG-APP-000319-AAA-000170

    <GroupDescription></GroupDescription>
    Group
    Show

  • AAA Services must be configured to automatically audit account enabling actions.

    &lt;VulnDiscussion&gt;Once an attacker establishes access to an application, the attacker often attempts to create a persistent method of reestabli...
    Rule Medium Severity
    Show

  • SRG-APP-000320-AAA-000180

    <GroupDescription></GroupDescription>
    Group
    Show

  • AAA Services must be configured to notify system administrators and ISSO of account enabling actions.

    &lt;VulnDiscussion&gt;Once an attacker establishes access to an application, the attacker often attempts to create a persistent method of reestabli...
    Rule Medium Severity
    Show

  • SRG-APP-000329-AAA-000190

    <GroupDescription></GroupDescription>
    Group
    Show

  • AAA Services must be configured to use Role-Based Access Control (RBAC) policy for levels of access authorization.

    &lt;VulnDiscussion&gt;RBAC is an access control policy that restricts information system access to authorized users. Without these security policie...
    Rule Low Severity
    Show

  • SRG-APP-000065-AAA-000200

    <GroupDescription></GroupDescription>
    Group
    Show

  • AAA Services must be configured to automatically lock user accounts after three consecutive invalid logon attempts within a 15-minute time period.

    &lt;VulnDiscussion&gt;By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise...
    Rule Medium Severity
    Show

  • SRG-APP-000345-AAA-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • AAA Services must be configured to maintain locks on user accounts until released by an administrator.

    &lt;VulnDiscussion&gt;By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise...
    Rule Medium Severity
    Show

  • SRG-APP-000095-AAA-000220

    <GroupDescription></GroupDescription>
    Group
    Show

  • AAA Services configuration audit records must identify what type of events occurred.

    &lt;VulnDiscussion&gt;Without establishing what type of event occurred, it would be difficult to establish, correlate, and investigate the events r...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules