STIGQter: STIG Summary: Mainframe Product Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 24 Jan 2020:

The Mainframe Product must provide centralized management and configuration of the content to be captured in audit records generated by all application components.

DISA Rule

SV-82745r1_rule

Vulnerability Number

V-68255

Group Title

SRG-APP-000356-MFP-000147

Rule Version

SRG-APP-000356-MFP-000147

Severity

CAT II

CCI(s)

• CCI-001844 - The information system provides centralized management and configuration of the content to be captured in audit records generated by organization-defined information system components.

Weight

10

Fix Recommendation

Configure the Mainframe Product to provide centralized management and configuration of the content to be captured in audit records generated by all application components.

Check Contents

If the Mainframe Product does not perform audit data management or storage function this is not applicable.

Examine configuration settings.

Determine if the Mainframe Product provides centralized management of the capture content for all components. If it does not, this is a finding.

Vulnerability Number

V-68255

Documentable

False

Rule Version

SRG-APP-000356-MFP-000147

Severity Override Guidance

If the Mainframe Product does not perform audit data management or storage function this is not applicable.

Examine configuration settings.

Determine if the Mainframe Product provides centralized management of the capture content for all components. If it does not, this is a finding.

Check Content Reference

M

Target Key

3061

Comments