Applications related to incident tracking must support organizational requirements to employ automated mechanisms to assist in the tracking of security incidents

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35604	SRG-APP-000182-AS-NA	SV-46891r1_rule		Medium

Description
Incident tracking is a method of monitoring networks and systems for activity indicative of viral infection or system attack. Monitoring for this type of activity provides the organization with the capability to proactively detect and respond to attacks. Automated mechanisms for tracking security incidents and collecting/analyzing incident information include, the Einstein network monitoring device and monitoring online Computer Incident Response Centers (CIRCs) and other electronic databases of incidents. Application servers are not designed to address incident response scenarios. This requirement does not apply.

Description

Incident tracking is a method of monitoring networks and systems for activity indicative of viral infection or system attack. Monitoring for this type of activity provides the organization with the capability to proactively detect and respond to attacks. Automated mechanisms for tracking security incidents and collecting/analyzing incident information include, the Einstein network monitoring device and monitoring online Computer Incident Response Centers (CIRCs) and other electronic databases of incidents. Application servers are not designed to address incident response scenarios. This requirement does not apply.

STIG	Date
Application Server Security Requirements Guide	2013-01-08

Details

Check Text ( C-43947r1_chk )
This requirement is NA for the AS SRG.

Fix Text (F-40145r1_fix)
The requirement is NA. No fix is required.