Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-15647 | DG0146-ORACLE10 | SV-24974r1_rule | ECAR-2 ECAR-3 | Medium |
Description |
---|
Records of any disabling or locking of account actions taken by the DBMS can contain information valuable to decisions to employ additional responsive actions. |
STIG | Date |
---|---|
Oracle 10 Database Instance STIG | 2014-01-14 |
Check Text ( C-1789r1_chk ) |
---|
Review audit settings for disabling or locking account events based on event failures. If the settings are not configured to include the cause of the lock or disabling, this is a Finding. |
Fix Text (F-3419r1_fix) |
---|
Determine and implement audit settings that will collect and store the cause of any DBMS account or connection lock or disabling actions taken by the DBMS. |