STIGQter STIGQter: STIG Summary: Tanium 7.3 Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 20 Feb 2019: The vulnerability scanning application must implement privileged access authorization to all Tanium information systems and infrastructure components for selected organization-defined vulnerability scanning activities.

DISA Rule

SV-102141r1_rule

Vulnerability Number

V-92039

Group Title

SRG-APP-000414

Rule Version

TANS-00-000755

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Prepare and maintain documentation identifying the Tanium Comply users and their respective User Roles and AD security groups.

Check Contents

Consult with the Tanium System Administrator to review the documented list of Tanium users.

If any users have access to Tanium Comply and are not on the list of documented users, this is a finding.

If Tanium Comply is not installed, this check is Not Applicable.

Vulnerability Number

V-92039

Documentable

False

Rule Version

TANS-00-000755

Severity Override Guidance

Consult with the Tanium System Administrator to review the documented list of Tanium users.

If any users have access to Tanium Comply and are not on the list of documented users, this is a finding.

If Tanium Comply is not installed, this check is Not Applicable.

Check Content Reference

M

Target Key

3505

Comments