STIGQter: STIG Summary: Virtual Machine Manager Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The VMM must perform verification of the correct operation of security functions: upon system startup and/or restart; upon command by a user with privileged access; and/or every 30 days.

DISA Rule

SV-207507r958946_rule

Vulnerability Number

V-207507

Group Title

SRG-OS-000446

Rule Version

SRG-OS-000446-VMM-001790

Severity

CAT II

CCI(s)

• CCI-002699 - Perform verification of the correct operation of organization-defined security functions: when the system is in an organization-defined transitional state; upon command by a user with appropriate privileges; and/or on an organization-defined frequency.

Weight

10

Fix Recommendation

Configure the VMM to perform verification of the correct operation of security functions: upon system startup and/or restart; upon command by a user with privileged access; and/or every 30 days.

Check Contents

Verify the VMM performs verification of the correct operation of security functions: upon system startup and/or restart; upon command by a user with privileged access; and/or every 30 days.

If it does not, this is a finding.

Vulnerability Number

V-207507

Documentable

False

Rule Version

SRG-OS-000446-VMM-001790

Severity Override Guidance

Verify the VMM performs verification of the correct operation of security functions: upon system startup and/or restart; upon command by a user with privileged access; and/or every 30 days.

If it does not, this is a finding.

Check Content Reference

M

Target Key

2924