STIGQter: STIG Summary: Application Security and Development Security Technical Implementation Guide Version: 5 Release: 1 Benchmark Date: 23 Oct 2020:

The application must alert the ISSO and SA (at a minimum) in the event of an audit processing failure.

DISA Rule

SV-222485r508029_rule

Vulnerability Number

V-222485

Group Title

SRG-APP-000108

Rule Version

APSC-DV-001110

Severity

CAT II

CCI(s)

CCI-000139 - The information system alerts designated organization-defined personnel or roles in the event of an audit processing failure.

Weight

Fix Recommendation

Configure the application to send an alarm in the event the audit system has failed or is failing.

Check Contents

Review system documentation and interview application administrator for details regarding logging configuration.

If the application utilizes a centralized logging system that provides the audit processing failure alarms, this requirement is not applicable.

Identify application alarming capability regarding audit processing failure events.

Verify the application is configured to alarm when the auditing system fails.

Example alarm events include but are not limited to:

hardware failure events
failures to capture audit record events
audit storage errors

If the application is not configured to alarm on alerts that indicate the audit system has failed or is failing, this is a finding.

The application must alert the ISSO and SA (at a minimum) in the event of an audit processing failure.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments