STIGQter: STIG Summary: Virtual Machine Manager Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The VMM must provide the capability for assigned IMOs/ISSOs or designated SAs to change the auditing to be performed on all VMM components, based on all selectable event criteria in near real time.

DISA Rule

SV-207449r971541_rule

Vulnerability Number

V-207449

Group Title

SRG-OS-000337

Rule Version

SRG-OS-000337-VMM-001190

Severity

CAT II

CCI(s)

• CCI-001914 - Provide the capability for organization-defined individuals or roles to change the logging to be performed on organization-defined system components based on organization-defined selectable event criteria within organization-defined time thresholds.

Weight

10

Fix Recommendation

Configure the VMM to provide the capability for assigned IMOs/ISSOs or designated SAs to change the auditing to be performed on all VMM components, based on all selectable event criteria in near real time.

Check Contents

Verify the VMM provides the capability for assigned IMOs/ISSOs or designated SAs to change the auditing to be performed on all VMM components, based on all selectable event criteria in near real time.

If it does not, this is a finding.

Vulnerability Number

V-207449

Documentable

False

Rule Version

SRG-OS-000337-VMM-001190

Severity Override Guidance

Verify the VMM provides the capability for assigned IMOs/ISSOs or designated SAs to change the auditing to be performed on all VMM components, based on all selectable event criteria in near real time.

If it does not, this is a finding.

Check Content Reference

M

Target Key

2924