The MDM server must support the capability to compile audit records from multiple components within the server into a system-wide (logical or physical) audit trail that is time-correlated to within an organization defined level of tolerance for the relationship between time stamps of individual records in the audit trail.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36322	SRG-APP-086-MDM-270-SRV	SV-47726r1_rule		Low

Description
Audit generation and audit records can be generated from various components within the MDM server. The list of audited events is the set of events for which audits are to be generated. This set of events is typically a subset of the list of all events for which the system is capable of generating audit records (i.e., auditable events).

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44563r1_chk )

Review product documentation and the MDM server audit feature configuration to determine whether it supports the capability to compile audit records from multiple components within the server into a system-wide (logical or physical) audit trail that is time-correlated to within an organization defined level of tolerance. If the MDM server does not support compiling audit records from multiple components within the server into a system-wide (logical or physical) audit trail that is time-correlated to within an organization defined level of tolerance, this is a finding.

Fix Text (F-40853r1_fix)
Configure the MDM server to compile audit records from multiple components within the server into a system-wide (logical or physical) audit trail that is time-correlated to within an organization defined level of tolerance for the relationship between time stamps of individual records in the audit trail.