II - Mission Support Classified
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000267-DB-000163
<GroupDescription></GroupDescription>Group -
Custom database code and associated application code must reveal detailed error messages only to the Information System Security Officer (ISSO), Information System Security manager (ISSM), Systems Administrator (SA), and Database Administrator (DBA).
<VulnDiscussion>Detailed error messages issued by custom or user-written code can possibly give too much detail to the users. This code shoul...Rule Medium Severity -
SRG-APP-000295-DB-000305
<GroupDescription></GroupDescription>Group -
CA IDMS must automatically terminate a terminal session after organization-defined conditions or trigger events of terminal inactivity time.
<VulnDiscussion>A logical session (for local, network, and remote access) is initiated whenever a user (or process acting on behalf of a user...Rule Medium Severity -
SRG-APP-000295-DB-000305
<GroupDescription></GroupDescription>Group -
CA IDMS must automatically terminate a batch external request unit after organization-defined conditions or trigger events after the batch program abnormally terminates.
<VulnDiscussion>A logical session (for local, network, and remote access) is initiated whenever a user (or process acting on behalf of a user...Rule Medium Severity -
SRG-APP-000295-DB-000305
<GroupDescription></GroupDescription>Group -
CA IDMS must automatically terminate an external run-unit after organization-defined conditions or trigger events of time waiting to issue a database request.
<VulnDiscussion>Inactive sessions, such as a logged on user who leaves their terminal, may give a bad actor access to the system.</VulnDis...Rule Medium Severity -
SRG-APP-000295-DB-000305
<GroupDescription></GroupDescription>Group -
CA IDMS must automatically terminate a task or session after organization-defined conditions or trigger events of time waiting to get a resource and/or time of inactivity.
<VulnDiscussion>A logical session (for local, network, and remote access) is initiated whenever a user (or process acting on behalf of a user...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.