STIGQter: STIG Summary: Microsoft Windows Server 2012/2012 R2 Member Server Security Technical Implementation Guide Version: 3 Release: 2 Benchmark Date: 04 May 2021:

Audit records must be backed up onto a different system or media than the system being audited.

DISA Rule

SV-225308r569185_rule

Vulnerability Number

V-225308

Group Title

SRG-OS-000342-GPOS-00133

Rule Version

WN12-AU-000203-01

Severity

CAT II

CCI(s)

• CCI-001851 - The information system off-loads audit records per organization-defined frequency onto a different system or media than the system being audited.

Weight

10

Fix Recommendation

Establish and implement a process for backing up log data to another system or media other than the system being audited.

Check Contents

Determine if a process to back up log data to a different system or media than the system being audited has been implemented. If it has not, this is a finding.

Vulnerability Number

V-225308

Documentable

False

Rule Version

WN12-AU-000203-01

Severity Override Guidance

Determine if a process to back up log data to a different system or media than the system being audited has been implemented. If it has not, this is a finding.

Check Content Reference

M

Target Key

4214

Comments