Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Audit data must be retained for at least one year.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-36671 | WN12-AU-000201 | SV-51563r1_rule | ECRR-1 | Medium |
| Description |
|---|
| Audit records are essential for investigating system activity after the fact. Retention periods for audit data are determined based on the sensitivity of the data handled by the system. |
| STIG | Date |
|---|---|
| Windows Server 2012 / 2012 R2 Member Server Security Technical Implementation Guide | 2016-06-08 |
Details
| Check Text ( C-46831r2_chk ) |
|---|
| Determine whether audit data is retained for at least one year. If the audit data is not retained for at least a year, this is a finding. |
| Fix Text (F-44693r2_fix) |
|---|
| Ensure the audit data is retained for at least a year. |