UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The mobile operating system must include organization defined additional, more detailed information in the audit records for audit events identified by type, location, or subject.


Overview

Finding ID Version Rule ID IA Controls Severity
V-32958 SRG-OS-000042-MOS-000017 SV-43356r2_rule Low
Description
Information system auditing capability is critical for accurate forensic analysis. Audit record content that may be necessary to satisfy the requirement of this control, includes timestamps, source and destination addresses, user/process identifiers, event descriptions, success/fail indications, file names involved, and access control or flow control rules invoked. The audit configuration must be adaptable to include organization defined additional, more detailed information in the audit records for audit events identified by type, location, or subject. Examples of this information include VPN state, communications interface, and duration of event. Rationale for non-applicability: The DoD value of full-text recording of privileged commands or the individual identities of group account users is written primarily for traditional OS (particularly UNIX systems) and typically does not apply in the mobility context where shell commands and group accounts might not be available. Furthermore, this requirement is adequately covered by the following three requirements: SRG-OS-000037-MOS-000013 SRG-OS-000049-MOS-000015 SRG-OS-000041-MOS-000016
STIG Date
Mobile Operating System Security Requirements Guide 2013-04-12

Details

Check Text ( C-41259r2_chk )
This requirement is NA for the Mobile OS SRG.
Fix Text (F-36873r2_fix)
The requirement is NA. No fix is required.