Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The MDM server must produce audit records containing the severity level of each recorded event.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-36273 | SRG-APP-095-MDM-242-SRV | SV-47677r1_rule | Low |
| Description |
|---|
| MDM server auditing capability is critical for accurate forensic analysis. Event severity levels allow system administrators and IA personnel to more easily identify critical system issues and debug software. |
| STIG | Date |
|---|---|
| Mobile Device Manager Security Requirements Guide | 2013-01-24 |
Details
| Check Text ( C-44513r1_chk ) |
|---|
| On the MDM server, review the audit logs to determine whether they contain entries with the severity level of each recorded event. If any event in the log does not have an event severity level, this is a finding. |
| Fix Text (F-40803r1_fix) |
|---|
| Modify the audit configuration to include the severity level of events in audit records. |