Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
WN12-GE-000011 | WN12-GE-000011 | WN12-GE-000011_rule | Medium |
Description |
---|
Virtual guest operating systems share the same vulnerabilities as operating systems running on dedicated hardware and must be individually assessed for security guidance compliance. The VMS used may be DISA VMS or a similar vulnerability and asset management system. |
STIG | Date |
---|---|
Microsoft Windows Server 2012 Domain Controller Security Technical Implementation Guide | 2013-07-25 |
Check Text ( C-WN12-GE-000011_chk ) |
---|
Determine if virtual guest operating systems have been registered in a vulnerability and asset management system as separate assets. If they have not, this is a finding. If no virtual guest operating systems exist, this is NA. |
Fix Text (F-WN12-GE-000011_fix) |
---|
Establish site policy to register all virtual guest operating systems as separate assets in a vulnerability and asset management system. |