UCF STIG Viewer Logo

The DBMS must provide automated mechanisms for supporting user account management.


Overview

Finding ID Version Rule ID IA Controls Severity
V-32192 SRG-APP-000023-DB-000001 SV-42509r1_rule Medium
Description
A comprehensive application account management process that includes automation helps to ensure accounts designated as requiring attention are consistently and promptly addressed. Examples include, but are not limited to, using automation to take action on multiple accounts designated as inactive, suspended, or terminated, or by disabling accounts located in non-centralized account stores, such as multiple servers. Enterprise environments make application user account management challenging and complex. A user management process requiring administrators to manually address account management functions adds risk of potential oversight. Automated mechanisms may be comprised of differing technologies that when placed together contain an overall automated mechanism supporting an organization's automated account management requirements. Databases can have large numbers of users in disparate locations and job functions. Automatic account management can help mitigate the risk of human error found in manually managing database access.
STIG Date
Database Security Requirements Guide 2012-07-02

Details

Check Text ( C-40697r1_chk )
Check DBMS settings to determine if account management is automated. If account management for the database is handled by the OS, check the OS for account management automation. If all account management is manual, this is a finding.
Fix Text (F-36116r1_fix)
Utilize a DBMS, OS, or third party product that can automate some or all account maintenance functionality.