Email software installation account usage must be logged.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-18868	EMG3-028 EMail	SV-20652r3_rule	ECPA-1	Low

Description
Email Administrator or application owner accounts are granted more enhanced privileges than non-privileged users. It is especially important to grant access to privileged accounts to only those persons who are qualified and authorized to use them. Each use of the account should be logged to demonstrate this accountability.

STIG	Date
Email Services Policy STIG	2015-08-07

Details

Check Text ( C-22676r5_chk )
Access the EDSP to verify logging procedure for software installation account usage. Examine evidence that logging is done for use of the correct account for email software installations and upgrades. If email software installation account usage is logged, this is not a finding.

Fix Text (F-19572r3_fix)
Implement a logging procedure for use of the email software installation account. Document it in the EDSP.