Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-36330 | SRG-APP-125-MDM-274-SRV | SV-47734r1_rule | Medium |
Description |
---|
Protection of log data includes assuring the log data is not accidentally lost or deleted. Backing up audit records to a different system or onto separate media than the system being audited on an organizationally defined frequency helps to assure in the event of a catastrophic system failure, the audit records will be retained. |
STIG | Date |
---|---|
Mobile Device Manager Security Requirements Guide | 2013-01-24 |
Check Text ( C-44571r1_chk ) |
---|
Review the MDM server configuration to determine whether the MDM server backs up audit records on an organization defined frequency onto a different system or media than the system being audited. If the MDM server does not back up audit records on an organization defined frequency onto a different system or media than the system being audited, this is a finding. |
Fix Text (F-40861r1_fix) |
---|
Configure the MDM server to back up audit records on an organization defined frequency onto a different system or media than the system being audited. |