STIGQter STIGQter: STIG Summary: Database Security Requirements Guide Version: 3 Release: 1 Benchmark Date: 22 Jan 2021:

The audit information produced by the DBMS must be protected from unauthorized deletion.

DISA Rule

SV-206540r617447_rule

Vulnerability Number

V-206540

Group Title

SRG-APP-000120

Rule Version

SRG-APP-000120-DB-000061

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Apply controls and modify permissions to protect database audit log data from unauthorized deletion, whether stored in the database itself or at the OS level.

Check Contents

Review locations of audit logs, both internal to the database, and database audit logs located at the operating system level.

Verify there are appropriate controls and permissions to protect the audit information from unauthorized deletion.

If appropriate controls and permissions do not exist, this is a finding.

Vulnerability Number

V-206540

Documentable

False

Rule Version

SRG-APP-000120-DB-000061

Severity Override Guidance

Review locations of audit logs, both internal to the database, and database audit logs located at the operating system level.

Verify there are appropriate controls and permissions to protect the audit information from unauthorized deletion.

If appropriate controls and permissions do not exist, this is a finding.

Check Content Reference

M

Target Key

2902

Comments