The network element must backup system-level audit event log records on an organizationally defined frequency onto a different system or media.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000105-RTR-NA	SRG-NET-000105-RTR-NA	SRG-NET-000105-RTR-NA_rule		Low

Description
Auditing and logging are key components of any security architecture. It is essential for security personnel to know what is being done, what was attempted to be done, where it was done, when it was done, and by whom it was done in order to compile an accurate risk assessment. Logging the actions of specific events provides a means to investigate an attack, recognize resource utilization or capacity thresholds, or to simply identify an improperly configured network element. It is imperative the collected log data from the various network elements be secured and backed up regularly onto a different system or offline media. This requirement is applicable to network device management and is not applicable to the routing function.

Description

Auditing and logging are key components of any security architecture. It is essential for security personnel to know what is being done, what was attempted to be done, where it was done, when it was done, and by whom it was done in order to compile an accurate risk assessment. Logging the actions of specific events provides a means to investigate an attack, recognize resource utilization or capacity thresholds, or to simply identify an improperly configured network element. It is imperative the collected log data from the various network elements be secured and backed up regularly onto a different system or offline media. This requirement is applicable to network device management and is not applicable to the routing function.

STIG	Date
Router Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000105-RTR-NA_chk )
This requirement is NA for router.

Fix Text (F-SRG-NET-000105-RTR-NA_fix)
This requirement is NA for router.