UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The MDM server must back up audit records on an organization defined frequency onto a different system or media than the system being audited.


Overview

Finding ID Version Rule ID IA Controls Severity
V-36330 SRG-APP-125-MDM-274-SRV SV-47734r1_rule Medium
Description
Protection of log data includes assuring the log data is not accidentally lost or deleted. Backing up audit records to a different system or onto separate media than the system being audited on an organizationally defined frequency helps to assure in the event of a catastrophic system failure, the audit records will be retained.
STIG Date
Mobile Device Manager Security Requirements Guide 2013-01-24

Details

Check Text ( C-44571r1_chk )
Review the MDM server configuration to determine whether the MDM server backs up audit records on an organization defined frequency onto a different system or media than the system being audited. If the MDM server does not back up audit records on an organization defined frequency onto a different system or media than the system being audited, this is a finding.
Fix Text (F-40861r1_fix)
Configure the MDM server to back up audit records on an organization defined frequency onto a different system or media than the system being audited.