STIGQter: STIG Summary: Virtual Machine Manager Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The VMM must audit the enforcement actions used to restrict access associated with changes to the system.

DISA Rule

SV-207471r984240_rule

Vulnerability Number

V-207471

Group Title

SRG-OS-000365

Rule Version

SRG-OS-000365-VMM-001420

Severity

CAT II

CCI(s)

• CCI-003938 - Automatically generate audit records of the enforcement actions.

Weight

10

Fix Recommendation

Configure the VMM to audit the enforcement actions used to restrict access associated with changes to the system.

Check Contents

Verify the VMM audits the enforcement actions used to restrict access associated with changes to the system.

If it does not, this is a finding.

Vulnerability Number

V-207471

Documentable

False

Rule Version

SRG-OS-000365-VMM-001420

Severity Override Guidance

Verify the VMM audits the enforcement actions used to restrict access associated with changes to the system.

If it does not, this is a finding.

Check Content Reference

M

Target Key

2924