STIGQter: STIG Summary: General Purpose Operating System Security Requirements Guide Version: 3 Release: 3 Benchmark Date: 28 Oct 2025:

The operating system must, for networked systems, compare internal information system clocks at least every 24 hours with an authoritative time source.

DISA Rule

SV-203711r1038944_rule

Vulnerability Number

V-203711

Group Title

SRG-OS-000355

Rule Version

SRG-OS-000355-GPOS-00143

Severity

CAT II

CCI(s)

• CCI-004923 - Compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.

Weight

10

Fix Recommendation

Configure the operating system to, for networked systems, compare internal information system clocks at least every 24 hours with an authoritative time source.

Check Contents

Verify the operating system, for networked systems, compares internal information system clocks at least every 24 hours with an authoritative time source.

If it does not, this is a finding.

Vulnerability Number

V-203711

Documentable

False

Rule Version

SRG-OS-000355-GPOS-00143

Severity Override Guidance

Verify the operating system, for networked systems, compares internal information system clocks at least every 24 hours with an authoritative time source.

If it does not, this is a finding.

Check Content Reference

M

Target Key

2895