Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-36672 | WN08-AU-000102 | SV-48289r2_rule | ECRR-1 | Medium |
Description |
---|
Protection of log data includes assuring the log data is not accidentally lost or deleted. Backing up audit records to a different system or onto separate media than the system being audited on an organizational defined frequency helps to assure in the event of a catastrophic system failure, the audit records will be retained. |
STIG | Date |
---|---|
Windows 8 / 8.1 Security Technical Implementation Guide | 2015-06-16 |
Check Text ( C-44967r1_chk ) |
---|
Determine if a process to backup log data on an organization defined frequency to a different system or media than the system being audited has been implemented. If it has not, this is a finding. |
Fix Text (F-41424r1_fix) |
---|
Establish and implement a process for backing up log data on an organization defined frequency to another system or media other than the system being audited. |