UCF STIG Viewer Logo

Audit data must be retained for at least one year.


Overview

Finding ID Version Rule ID IA Controls Severity
V-36671 WN12-AU-000201 SV-51563r1_rule ECRR-1 Medium
Description
Audit records are essential for investigating system activity after the fact. Retention periods for audit data are determined based on the sensitivity of the data handled by the system.
STIG Date
Windows Server 2012 / 2012 R2 Domain Controller Security Technical Implementation Guide 2016-12-19

Details

Check Text ( C-46831r2_chk )
Determine whether audit data is retained for at least one year. If the audit data is not retained for at least a year, this is a finding.
Fix Text (F-44693r2_fix)
Ensure the audit data is retained for at least a year.