STIGQter: STIG Summary: HYCU Protege Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

The HYCU virtual appliance must generate an immediate real-time alert of all audit failure events requiring real-time alerts.

DISA Rule

SV-268254r1038704_rule

Vulnerability Number

V-268254

Group Title

SRG-APP-000360-NDM-000295

Rule Version

HYCU-ND-000430

Severity

CAT II

CCI(s)

• CCI-001858 - Provide an alert in an organization-defined real-time-period to organization-defined personnel, roles, and/or locations when organization-defined audit failure events requiring real-time alerts occur.
• CCI-003831 - Alert organization-defined personnel or roles upon detection of unauthorized access, modification, or deletion of audit information.

Weight

10

Fix Recommendation

Log in to the HYCU Web UI and go to the "Events" menu and open "Email Notifications".

Ensure that all the appropriate/relevant categories are selected and that the "Status" includes failures.

Add a "Subject" for the "Email Notifications" and email address for necessary auditors or HYCU administrators.

Check Contents

Log in to the HYCU Web UI and review the "Events" menu and "Email Notifications" to verify that all appropriate/relevant audit failure events are included in the "Category" drop-down menu.

If these events are not shown (reference a recent event capturing a login to HYCU for validation), this is a finding.

Vulnerability Number

V-268254

Documentable

False

Rule Version

HYCU-ND-000430

Severity Override Guidance

Log in to the HYCU Web UI and review the "Events" menu and "Email Notifications" to verify that all appropriate/relevant audit failure events are included in the "Category" drop-down menu.

If these events are not shown (reference a recent event capturing a login to HYCU for validation), this is a finding.

Check Content Reference

M

Target Key

5660