STIGQter: STIG Summary: Microsoft Windows Server 2016 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 04 May 2021:

Audit records must be backed up to a different system or media than the system being audited.

DISA Rule

SV-224875r569186_rule

Vulnerability Number

V-224875

Group Title

SRG-OS-000342-GPOS-00133

Rule Version

WN16-AU-000010

Severity

CAT II

CCI(s)

• CCI-001851 - The information system off-loads audit records per organization-defined frequency onto a different system or media than the system being audited.

Weight

10

Fix Recommendation

Establish and implement a process for backing up log data to another system or media other than the system being audited.

Check Contents

Determine if a process to back up log data to a different system or media than the system being audited has been implemented.

If it has not, this is a finding.

Vulnerability Number

V-224875

Documentable

False

Rule Version

WN16-AU-000010

Severity Override Guidance

Determine if a process to back up log data to a different system or media than the system being audited has been implemented.

If it has not, this is a finding.

Check Content Reference

M

Target Key

4205

Comments