UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Audit records must be backed up to a different system or media than the system being audited.


Overview

Finding ID Version Rule ID IA Controls Severity
V-224875 WN16-AU-000010 SV-224875r877390_rule Medium
Description
Protection of log data includes assuring the log data is not accidentally lost or deleted. Audit information stored in one location is vulnerable to accidental or incidental deletion or alteration.
STIG Date
Microsoft Windows Server 2016 Security Technical Implementation Guide 2024-02-21

Details

Check Text ( C-26566r465527_chk )
Determine if a process to back up log data to a different system or media than the system being audited has been implemented.

If it has not, this is a finding.
Fix Text (F-26554r465528_fix)
Establish and implement a process for backing up log data to another system or media other than the system being audited.