STIGQter: STIG Summary: IBM Hardware Management Console (HMC) Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The ESCON Director Application Console Event log must be enabled.

DISA Rule

SV-256859r958442_rule

Vulnerability Number

V-256859

Group Title

SRG-OS-000062-GPOS-00031

Rule Version

HLESC030

Severity

CAT I

CCI(s)

• CCI-000169 - Provide audit record generation capability for the event types the system is capable of auditing as defined in AU-2 a. on organization-defined information system components.

Weight

10

Fix Recommendation

Ensure that an ESCON Director Application Console log is created and in use every time the system is switched on.

The ESCON Director maintains an audit trail at the ESCD console’s fixed disk. This audit trail logs the time, date, and password identification when changes have been made to the ESCON Director.

Check Contents

If the ESCON Director Console is present, verify on the ESCON Director Application Console that the Event log is in use, otherwise this check is not applicable.

If no Event log exists, this is a finding.

Vulnerability Number

V-256859

Documentable

False

Rule Version

HLESC030

Severity Override Guidance

If the ESCON Director Console is present, verify on the ESCON Director Application Console that the Event log is in use, otherwise this check is not applicable.

If no Event log exists, this is a finding.

Check Content Reference

M

Target Key

5533