STIGQter: STIG Summary: Container Platform Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 20 Nov 2020:

The container platform must provide system notifications to the system administrator and operational staff when anomalies in the operation of the organization-defined security functions are discovered.

DISA Rule

SV-233244r599722_rule

Vulnerability Number

V-233244

Group Title

SRG-APP-000474

Rule Version

SRG-APP-000474-CTR-001180

Severity

CAT II

CCI(s)

• CCI-002702 - The information system shuts the information system down, restarts the information system, and/or initiates organization-defined alternative action(s) when anomalies in the operation of the organization-defined security functions are discovered.

Weight

10

Fix Recommendation

Configure the container platform runtime to notify system administrator and operation staff when anomalies in the operation of the security functions as defined in site security plan are discovered.

Check Contents

Review container platform runtime documentation and configuration settings.

If the container platform is not configured to notify organization-defined information system role when anomalies in the operation of security functions as defined by site security plan are discovered, this is a finding.

Vulnerability Number

V-233244

Documentable

False

Rule Version

SRG-APP-000474-CTR-001180

Severity Override Guidance

Review container platform runtime documentation and configuration settings.

If the container platform is not configured to notify organization-defined information system role when anomalies in the operation of security functions as defined by site security plan are discovered, this is a finding.

Check Content Reference

M

Target Key

5239

Comments