UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Audit data must be reviewed on a regular basis.


Overview

Finding ID Version Rule ID IA Controls Severity
V-36670 WN08-AU-000100 SV-48287r1_rule ECAT-1 ECAT-2 Medium
Description
To be of value, audit logs from critical systems must be reviewed on a regular basis. Critical systems should be reviewed on a daily basis to identify security breaches and potential weaknesses in the security structure. This can be done with the use of monitoring software or other utilities for this purpose.
STIG Date
Windows 8 Security Technical Implementation Guide 2014-01-07

Details

Check Text ( C-44965r1_chk )
Determine if the organization has a policy that requires the review of audit logs on a predetermined schedule and that the policy has been implemented. If they are not, this is a finding.
Fix Text (F-41422r1_fix)
Establish a site policy that defines a schedule for the review of audit logs.