Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Audit records should include the reason for blacklisting or disabling DBMS connections or accounts.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-15647 | DG0146-ORACLE11 | SV-24976r1_rule | ECAR-2 ECAR-3 | Medium |
| Description |
|---|
| Records of any disabling or locking of account actions taken by the DBMS can contain information valuable to decisions to employ additional responsive actions. |
| STIG | Date |
|---|---|
| Oracle 11 Database Instance STIG | 2014-01-14 |
Details
| Check Text ( C-28646r1_chk ) |
|---|
| Review audit settings for disabling or locking account events based on event failures. If the settings are not configured to include the cause of the lock or disabling, this is a Finding. |
| Fix Text (F-3790r1_fix) |
|---|
| Determine and implement audit settings that will collect and store the cause of any DBMS account or connection lock or disabling actions taken by the DBMS. |