STIGQter: STIG Summary: ISEC7 Sphere Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The ISEC7 SPHERE must alert the information system security officer (ISSO) and system administrator (SA) (at a minimum) in the event of an audit processing failure.

DISA Rule

SV-224765r1013811_rule

Vulnerability Number

V-224765

Group Title

SRG-APP-000108

Rule Version

ISEC-06-000380

Severity

CAT II

CCI(s)

• CCI-000139 - Alert organization-defined personnel or roles within an organization-defined time period in the event of an audit logging process failure.

Weight

10

Fix Recommendation

Log in to the ISEC7 SPHERE console.
Navigate to Administration >> Configuration >> Notifications >> Recipient Lists.
Select "Edit" next to the Systems Notifications.
Under Add recipient, select "Email" as the Type and enter the correct email address of recipients.
Select "Add".

Check Contents

Log in to the ISEC7 SPHERE console.
Navigate to Administration >> Configuration >> Notifications >> Recipient Lists.
Select "Edit" next to the Systems Notifications.
Verify the email address or distribution list has been added.

If a recipient email address or distribution list has not been added to System Notifications, this is a finding.

Vulnerability Number

V-224765

Documentable

False

Rule Version

ISEC-06-000380

Severity Override Guidance

Log in to the ISEC7 SPHERE console.
Navigate to Administration >> Configuration >> Notifications >> Recipient Lists.
Select "Edit" next to the Systems Notifications.
Verify the email address or distribution list has been added.

If a recipient email address or distribution list has not been added to System Notifications, this is a finding.

Check Content Reference

M

Target Key

4200