The DNS implementation must notify the user of security-related changes to the users account occurring during the organization defined time period.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-33941	SRG-NET-000052-DNS-000029	SV-44394r1_rule		Low

Description
Notifying the user of account changes mitigates the risk of an attacker modifying an account without the user's knowledge and potentially gaining unauthorized access to the system or other systems the user or administrator is responsible for.

STIG	Date
Domain Name System (DNS) Security Requirements Guide	2012-10-24

Details

Check Text ( C-41950r1_chk )
Review the DNS system configuration to determine if the system is configured to notify the user of any security-related account changes during the specified period of time. If the system is not configured to notify the user of any account changes, during the specified period of time, this is a finding.

Fix Text (F-37854r1_fix)
Configure the DNS system to notify the user of any security-related account changes during the specified period of time.