Skip to content

No profile (default benchmark)

Rules and Groups employed by this XCCDF Profile

  • Connections between the DoD enclave and the Internet or other public or commercial wide area networks must require a DMZ.

    <VulnDiscussion>In order to protect DoD data and systems, all remote access to DoD information systems must be mediated through a managed acc...
    Rule Medium Severity
  • SRG-APP-000506

    <GroupDescription></GroupDescription>
    Group
  • The application must generate audit records when concurrent logons from different workstations occur.

    &lt;VulnDiscussion&gt;When an application provides users with the ability to concurrently logon, an event must be recorded that indicates the user ...
    Rule Low Severity
  • SRG-APP-000516

    <GroupDescription></GroupDescription>
    Group
  • The Program Manager must verify all levels of program management, designers, developers, and testers receive annual security training pertaining to their job function.

    &lt;VulnDiscussion&gt;Many application team members may not be aware of the security implications regarding the code that they design, write and te...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules