Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-14226 | 1.032 | SV-32275r2_rule | Medium |
Description |
---|
Audit records are essential for investigating system activity after the fact. Retention periods for audit data are determined based on the sensitivity of the data handled by the system. |
STIG | Date |
---|---|
Windows Server 2008 R2 Member Server Security Technical Implementation Guide | 2019-03-13 |
Check Text ( C-66305r2_chk ) |
---|
Determine whether audit data is retained for at least one year. If the audit data is not retained for at least one year, this is a finding. |
Fix Text (F-71693r2_fix) |
---|
Ensure the audit data is retained for at least one year. |