Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The MDM server must notify appropriate individuals when administrator accounts are created.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-36078 | SRG-APP-291-MDM-078-SRV | SV-47469r1_rule | Medium |
| Description |
|---|
| Once an attacker establishes initial access to a system, they often attempt to create a persistent method of re-establishing access. One way to accomplish this is for the attacker to simply create a new account. By notifying personnel when an account is created, action can be taken immediately to terminate the access. |
| STIG | Date |
|---|---|
| Mobile Device Manager Security Requirements Guide | 2013-01-24 |
Details
| Check Text ( C-44317r1_chk ) |
|---|
| Review the MDM server configuration to ensure the system is configured to notify appropriate individuals when administrator accounts are created. If the system is not configured to notify appropriate individuals when administrator accounts are created, this is a finding. |
| Fix Text (F-40608r1_fix) |
|---|
| Configure the MDM server to notify appropriate individuals when administrator accounts are created. |