UCF STIG Viewer Logo

The MDM server must back up audit records on an organization defined frequency onto a different system or media than the system being audited.


Overview

Finding ID Version Rule ID IA Controls Severity
V-36330 SRG-APP-125-MDM-274-SRV SV-47734r1_rule Medium
Description
Protection of log data includes assuring the log data is not accidentally lost or deleted. Backing up audit records to a different system or onto separate media than the system being audited on an organizationally defined frequency helps to assure in the event of a catastrophic system failure, the audit records will be retained.
STIG Date
Mobile Device Manager Security Requirements Guide 2013-01-24

Details

Check Text ( C-44571r1_chk )
Review the MDM server configuration to determine whether the MDM server backs up audit records on an organization defined frequency onto a different system or media than the system being audited. If the MDM server does not back up audit records on an organization defined frequency onto a different system or media than the system being audited, this is a finding.
Fix Text (F-40861r1_fix)
Configure the MDM server to back up audit records on an organization defined frequency onto a different system or media than the system being audited.