The MDM server must notify, as required, appropriate individuals when administrator accounts are modified.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36079	SRG-APP-292-MDM-079-SRV	SV-47470r1_rule		Medium

Description
Monitoring account modification is critical to ensure only appropriate personnel have access to the MDM server. This reduces the possibility that an account will be given more access than is intended. In order to facilitate the monitoring, the MDM server must notify designated personnel when an account is modified.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44318r1_chk )
Review the MDM server configuration to ensure the system is configured to notify appropriate individuals when administrator accounts are modified. If the system is not configured to notify appropriate individuals when administrator accounts are modified, this is a finding.

Fix Text (F-40609r1_fix)
Configure the MDM server to notify appropriate individuals when administrator accounts are modified.