The UEM server must employ an audited override of automated access control mechanisms under organization-defined conditions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-234473	SRG-APP-000327-UEM-000200	SV-234473r617355_rule		Medium

Description
Successful incident response and auditing relies on timely, accurate system information and analysis in order to allow the organization to identify and respond to potential incidents in a proficient manner. Actions that could adversely impact the system must be audited for forensic analysis. Satisfies:FAU_ALT_EXT.1.1, FAU_GEN.1.1(1), FMT_SMF.1.1(2)c.8 Reference:PP-MDM-411065, PP-MDM-412000

STIG	Date
Unified Endpoint Management Server Security Requirements Guide	2020-12-14

Details

Check Text ( C-37658r614429_chk )
Verify the UEM server employs an audited override of automated access control mechanisms under organization-defined conditions. If the UEM server does not employ an audited override of automated access control mechanisms under organization-defined conditions, this is a finding.

Fix Text (F-37623r614430_fix)
Configure the UEM server to employ an audited override of automated access control mechanisms under organization-defined conditions.