UCF STIG Viewer Logo

The MDM server must protect audit information from unauthorized modification.


Overview

Finding ID Version Rule ID IA Controls Severity
V-36314 SRG-APP-119-MDM-265-SRV SV-47718r1_rule Medium
Description
If audit data were to become compromised then competent forensic analysis and discovery of the true source of potentially malicious system activity is impossible to achieve.
STIG Date
Mobile Device Manager Security Requirements Guide 2013-01-24

Details

Check Text ( C-44556r1_chk )
Review MDM server documentation and configuration settings to determine whether the MDM server audit feature protects audit information from unauthorized modification. If the MDM server does not protect audit information from unauthorized modification, this is a finding.
Fix Text (F-40846r1_fix)
Configure the MDM server to protect audit information from unauthorized modification.