STIGQter: STIG Summary: Application Security and Development Security Technical Implementation Guide Version: 5 Release: 1 Benchmark Date: 23 Oct 2020: STIGQter: STIG Summary: Application Security and Development Security Technical Implementation Guide Version: 5 Release: 1 Benchmark Date: 23 Oct 2020:SV-222499r508029_rule
V-222499
SRG-APP-000375
APSC-DV-001270
CAT II
10
Configure the application to leverage the underlying operating system as the time source when recording time stamps or design the application to ensure granularity of 1 second as the minimum degree of precision.
Review the system documentation and interview the application administrator to determine where application audit logs are written and how time stamps are recorded.
If the application utilizes the underlying OS for time stamping and time synchronization when writing the audit logs, this requirement is not applicable.
Access and review log files over a period of at least 10 minutes; compare time stamps written in the application log to the system clock to ensure time is synchronized to within 1 second of precision.
If the application audit log time stamps differ from the OS time source by more than one second, this is a finding.
V-222499
False
APSC-DV-001270
Review the system documentation and interview the application administrator to determine where application audit logs are written and how time stamps are recorded.
If the application utilizes the underlying OS for time stamping and time synchronization when writing the audit logs, this requirement is not applicable.
Access and review log files over a period of at least 10 minutes; compare time stamps written in the application log to the system clock to ensure time is synchronized to within 1 second of precision.
If the application audit log time stamps differ from the OS time source by more than one second, this is a finding.
M
4093