Audit records must be backed up on an organization defined frequency onto a different system or media than the system being audited.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Audit records must be backed up on an organization defined frequency onto a different system or media than the system being audited.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36672	WN08-AU-000102	SV-48289r2_rule	ECRR-1	Medium

Description
Protection of log data includes assuring the log data is not accidentally lost or deleted. Backing up audit records to a different system or onto separate media than the system being audited on an organizational defined frequency helps to assure in the event of a catastrophic system failure, the audit records will be retained.

STIG	Date
Windows 8 / 8.1 Security Technical Implementation Guide	2015-11-30

Details

Check Text ( C-44967r1_chk )
Determine if a process to backup log data on an organization defined frequency to a different system or media than the system being audited has been implemented. If it has not, this is a finding.

Fix Text (F-41424r1_fix)
Establish and implement a process for backing up log data on an organization defined frequency to another system or media other than the system being audited.