UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Audit records must be backed up on an organization defined frequency onto a different system or media than the system being audited.


Overview

Finding ID Version Rule ID IA Controls Severity
V-36672 WN08-AU-000102 SV-48289r2_rule ECRR-1 Medium
Description
Protection of log data includes assuring the log data is not accidentally lost or deleted. Backing up audit records to a different system or onto separate media than the system being audited on an organizational defined frequency helps to assure in the event of a catastrophic system failure, the audit records will be retained.
STIG Date
Windows 8 / 8.1 Security Technical Implementation Guide 2015-06-16

Details

Check Text ( C-44967r1_chk )
Determine if a process to backup log data on an organization defined frequency to a different system or media than the system being audited has been implemented. If it has not, this is a finding.
Fix Text (F-41424r1_fix)
Establish and implement a process for backing up log data on an organization defined frequency to another system or media other than the system being audited.