Skip to content

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • The DBMS must implement the capability to centrally review and analyze audit records from multiple components within the system.

    <VulnDiscussion>Automated mechanisms for centralized reviews and analyses include Security Information and Event Management products.</Vul...
    Rule Medium Severity
  • SRG-APP-000795

    <GroupDescription></GroupDescription>
    Group
  • The DBMS must alert organization-defined personnel or roles upon detection of unauthorized access, modification, or deletion of audit information.

    &lt;VulnDiscussion&gt;Audit information includes all information needed to successfully audit system activity, such as audit records, audit log set...
    Rule Medium Severity
  • SRG-APP-000810

    <GroupDescription></GroupDescription>
    Group
  • The DBMS must prevent the installation of organization-defined software and firmware components without verification that the component has been digitally signed using a certificate recognized and approved by the organization.

    &lt;VulnDiscussion&gt;Software and firmware components prevented from installation unless signed with recognized and approved certificates include ...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules