STIGQter: STIG Summary: Virtual Machine Manager Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The VMM must generate audit records for all direct access to the VMM.

DISA Rule

SV-207523r959000_rule

Vulnerability Number

V-207523

Group Title

SRG-OS-000475

Rule Version

SRG-OS-000475-VMM-001950

Severity

CAT II

CCI(s)

• CCI-000172 - Generate audit records for the event types defined in AU-2 c that include the audit record content defined in AU-3.

Weight

10

Fix Recommendation

Configure the VMM to generate audit records for all direct access to the VMM.

Check Contents

Verify the VMM generates audit records for all direct access to the VMM.

If it does not, this is a finding.

Vulnerability Number

V-207523

Documentable

False

Rule Version

SRG-OS-000475-VMM-001950

Severity Override Guidance

Verify the VMM generates audit records for all direct access to the VMM.

If it does not, this is a finding.

Check Content Reference

M

Target Key

2924