STIGQter: STIG Summary: Unified Endpoint Management Server Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 20 Nov 2020:

The application must notify the Information System Security Manager (ISSM) and Information System Security Officer (ISSO) of failed security verification tests.

DISA Rule

SV-234430r617355_rule

Vulnerability Number

V-234430

Group Title

SRG-APP-000275

Rule Version

SRG-APP-000275-UEM-000157

Severity

CAT II

CCI(s)

• CCI-001294 - The information system notifies organization-defined personnel or roles of failed security verification tests.

Weight

10

Fix Recommendation

Configure the UEM server to notify the ISSO and ISSM of failed security verification tests.

Check Contents

Verify the UEM server notifies the ISSO and ISSM of failed security verification tests.

If the UEM server does not notify the ISSO and ISSM of failed security verification tests, this is a finding.

Vulnerability Number

V-234430

Documentable

False

Rule Version

SRG-APP-000275-UEM-000157

Severity Override Guidance

Verify the UEM server notifies the ISSO and ISSM of failed security verification tests.

If the UEM server does not notify the ISSO and ISSM of failed security verification tests, this is a finding.

Check Content Reference

M

Target Key

5269

Comments