Skip to content

I - Mission Critical Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000068

    Group
  • The container platform must display the Standard Mandatory DoD Notice and Consent Banner before granting access to platform components.

    The container platform has countless components where different access levels are needed. To control access, the user must first log in to the component and then be presented with a DoD-approved us...
    Rule Low Severity
  • SRG-APP-000069

    Group
  • The container platform must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until users acknowledge the usage and conditions and take explicit actions to log on for further access.

    The banner must be acknowledged by the user prior to allowing the user access to any container platform component. This provides assurance that the user has seen the message and accepted the condit...
    Rule Low Severity
  • SRG-APP-000089

    Group
  • The container platform must generate audit records for all DoD-defined auditable events within all components in the platform.

    Within the container platform, audit data can be generated from any of the deployed container platform components. This audit data is important when there are issues, including security incidents t...
    Rule Medium Severity
  • SRG-APP-000090

    Group
  • The container platform must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.

    Without the capability to restrict which roles and individuals can select which events are audited, unauthorized personnel may be able to prevent the auditing of critical events. Misconfigured audi...
    Rule Medium Severity
  • SRG-APP-000091

    Group
  • The container platform must generate audit records when successful/unsuccessful attempts to access privileges occur.

    Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an in...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules