Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-78923 | IBMZ-VM-000940 | SV-93629r1_rule | Medium |
Description |
---|
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity. |
STIG | Date |
---|---|
IBM z/VM Using CA VM:Secure Security Technical Implementation Guide | 2018-04-04 |
Check Text ( C-78509r1_chk ) |
---|
If there is no documented process for audit offload, this is a finding. Examine the documented user process for audit record offload. If the procedure does not offload to a different system or media, this is a finding. |
Fix Text (F-85673r1_fix) |
---|
Develop a user written procedure to offload audit records to a different system or media. |