SQL Server must support the requirement to activate an alarm and/or automatically shut down the information system if a failure is detected in its software components.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-40905	SQL2-00-023000	SV-53259r3_rule		Medium

Description
Predictable failure prevention requires organizational planning to address system failure issues. If components key to maintaining system security fail to function, then SQL Server could continue operating in an insecure state. The organization must be prepared, and SQL Server must be configured to send an alarm for such conditions and/or automatically shut down SQL Server. If appropriate actions are not taken when component failures occur, a denial of service condition may occur. Appropriate actions can include conducting a graceful application shutdown to avoid losing information.

Description

Predictable failure prevention requires organizational planning to address system failure issues. If components key to maintaining system security fail to function, then SQL Server could continue operating in an insecure state. The organization must be prepared, and SQL Server must be configured to send an alarm for such conditions and/or automatically shut down SQL Server. If appropriate actions are not taken when component failures occur, a denial of service condition may occur. Appropriate actions can include conducting a graceful application shutdown to avoid losing information.

STIG	Date
Microsoft SQL Server 2012 Database Instance Security Technical Implementation Guide	2015-03-26

Details

Check Text ( C-47560r4_chk )
Check SQL Server configuration to verify the system activates an alarm and/or triggers a system shutdown when a component failure is detected. If SQL Server does not take either or both actions, this is a finding.

Fix Text (F-46187r2_fix)
Configure SQL Server to activate an alarm and/or trigger a system shutdown when a component failure is detected.