Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Email software installation account usage must be logged.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-18868 | EMG3-028 EMail | SV-20652r3_rule | ECPA-1 | Low |
| Description |
|---|
| Email Administrator or application owner accounts are granted more enhanced privileges than non-privileged users. It is especially important to grant access to privileged accounts to only those persons who are qualified and authorized to use them. Each use of the account should be logged to demonstrate this accountability. |
| STIG | Date |
|---|---|
| Email Services Policy STIG | 2015-08-07 |
Details
| Check Text ( C-22676r5_chk ) |
|---|
| Access the EDSP to verify logging procedure for software installation account usage. Examine evidence that logging is done for use of the correct account for email software installations and upgrades. If email software installation account usage is logged, this is not a finding. |
| Fix Text (F-19572r3_fix) |
|---|
| Implement a logging procedure for use of the email software installation account. Document it in the EDSP. |