Skip to content

II - Mission Support Sensitive

Rules and Groups employed by this XCCDF Profile

  • All audit records must identify any containers associated with the event within the container platform.

    Without information that establishes the identity of the containers offering user services or running on behalf of a user within the platform associated with audit events, security personnel cannot...
    Rule Medium Severity
  • SRG-APP-000101

    Group
  • The container platform must generate audit records containing the full-text recording of privileged commands or the individual identities of group account users.

    During an investigation of an incident, it is important to fully understand what took place. Often, information is not part of the audited event due to the data's nature, security risk, or audit lo...
    Rule Medium Severity
  • SRG-APP-000111

    Group
  • The container platform components must provide the ability to send audit logs to a central enterprise repository for review and analysis.

    The container platform components must send audit events to a central managed audit log repository to provide reporting, analysis, and alert notification. Incident response relies on successful tim...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules