The application must support taking organization defined list of least-disruptive actions to terminate suspicious events.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36399	SRG-APP-287-NA	SV-47803r1_rule		Medium

Description
System availability is a key tenet of system security. Organizations need to have the flexibility to be able to define the automated actions taken in response to an identified incident. This includes being able to define a least disruptive action that the application takes to terminate suspicious events. A least disruptive action may include initiating a request for human response rather than blocking traffic or disrupting system operation. Rationale for non-applicability: The MDM server is not an IDS.

Description

System availability is a key tenet of system security. Organizations need to have the flexibility to be able to define the automated actions taken in response to an identified incident. This includes being able to define a least disruptive action that the application takes to terminate suspicious events. A least disruptive action may include initiating a request for human response rather than blocking traffic or disrupting system operation. Rationale for non-applicability: The MDM server is not an IDS.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44641r1_chk )
This requirement is NA for the MDM server SRG.

Fix Text (F-40931r1_fix)
The requirement is NA. No fix is required.