The mobile operating system must alert the mobile device management server in the event of an audit processing failure.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-32962	SRG-OS-000046-MOS-000021	SV-43360r1_rule		Medium

Description
It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Audit processing failures include, software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded. When an audit process failure occurs, it is imperative for the mobile device management (MDM) server to be notified, which can direct this information to the appropriate person or process.

Description

It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Audit processing failures include, software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded. When an audit process failure occurs, it is imperative for the mobile device management (MDM) server to be notified, which can direct this information to the appropriate person or process.

STIG	Date
Mobile Operating System Security Requirements Guide	2013-04-12

Details

Check Text ( C-41263r1_chk )
Verify the auditing system can alert the mobile device management server in the event of an audit processing failure. If the auditing system cannot alert the mobile device management server in the event of an audit processing failure or is not configured to do so, this is a finding.

Fix Text (F-36877r1_fix)
Configure the auditing system to alert the mobile device management server in the event of an audit processing failure.