The MDM server must ensure unauthorized, security relevant configuration changes are tracked if detected.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36076	SRG-APP-139-MDM-076-SRV	SV-47467r1_rule		Low

Description
Uncoordinated or incorrect configuration changes to MDM server can potentially lead to outages and possibly compromises. Configuration changes must be tracked and detected to prevent these outages and compromises.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44315r1_chk )
Review the MDM server configuration to ensure unauthorized, security relevant configuration changes detected are tracked. If the system is not configured to track these changes, this is a finding.

Fix Text (F-40606r1_fix)
Configure the MDM server to detect and track unauthorized, security relevant changes.