Skip to content

No profile (default benchmark)

Rules and Groups employed by this XCCDF Profile

  • Automation Controller must implement cryptography mechanisms to protect the integrity of information.

    Encryption is critical for protection of remote access sessions. If encryption is not being used for integrity, malicious users may gain the ability to modify Automation Controller configuration. T...
    Rule High Severity
  • SRG-APP-000068-AS-000035

    Group
  • The Automation Controller management interface must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.

    Automation Controller is required to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system management interface, providing privacy and security notices c...
    Rule Medium Severity
  • SRG-APP-000080-AS-000045

    Group
  • Automation Controller must use external log providers that can collect user activity logs in independent, protected repositories to prevent modification or repudiation.

    Automation Controller must be configured to use external logging to compile log records from multiple components within the server. The events occurring must be time-correlated in order to conduct ...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules