Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-36671 | WN12-AU-000201 | SV-51563r1_rule | ECRR-1 | Medium |
Description |
---|
Audit records are essential for investigating system activity after the fact. Retention periods for audit data are determined based on the sensitivity of the data handled by the system. |
STIG | Date |
---|---|
Windows Server 2012/2012 R2 Member Server Security Technical Implementation Guide | 2018-10-30 |
Check Text ( C-46831r2_chk ) |
---|
Determine whether audit data is retained for at least one year. If the audit data is not retained for at least a year, this is a finding. |
Fix Text (F-44693r2_fix) |
---|
Ensure the audit data is retained for at least a year. |