STIGQter: STIG Summary: General Purpose Operating System Security Requirements Guide Version: 3 Release: 3 Benchmark Date: 28 Oct 2025:

The operating system must provide the capability for assigned IMOs/ISSOs or designated SAs to change the auditing to be performed on all operating system components, based on all selectable event criteria in near real time.

DISA Rule

SV-203699r971541_rule

Vulnerability Number

V-203699

Group Title

SRG-OS-000337

Rule Version

SRG-OS-000337-GPOS-00129

Severity

CAT II

CCI(s)

• CCI-001914 - Provide the capability for organization-defined individuals or roles to change the logging to be performed on organization-defined system components based on organization-defined selectable event criteria within organization-defined time thresholds.

Weight

10

Fix Recommendation

Configure the operating system to provide the capability for assigned IMOs/ISSOs or designated SAs to change the auditing to be performed on all operating system components, based on all selectable event criteria in near real time.

Check Contents

Verify the operating system provides the capability for assigned IMOs/ISSOs or designated SAs to change the auditing to be performed on all operating system components, based on all selectable event criteria in near real time. If it does not, this is a finding.

Vulnerability Number

V-203699

Documentable

False

Rule Version

SRG-OS-000337-GPOS-00129

Severity Override Guidance

Verify the operating system provides the capability for assigned IMOs/ISSOs or designated SAs to change the auditing to be performed on all operating system components, based on all selectable event criteria in near real time. If it does not, this is a finding.

Check Content Reference

M

Target Key

2895