STIGQter: STIG Summary: IBM MaaS360 with Watson v10.x MDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 26 Apr 2019:

The MaaS360 MDM server must be configured to transfer MaaS360 MDM server logs to another server for storage, analysis, and reporting. Note: MaaS360 MDM server logs include logs of MDM events and logs transferred to the MaaS360 MDM server by MDM agents of managed devices.

DISA Rule

SV-96867r1_rule

Vulnerability Number

V-82153

Group Title

PP-MDM-311054

Rule Version

M360-10-006300

Severity

CAT II

CCI(s)

• CCI-001851 - The information system off-loads audit records per organization-defined frequency onto a different system or media than the system being audited.

Weight

10

Fix Recommendation

The site system administrator must communicate with IBM to get access to web services to extract server logs.

Check Contents

Verify the site has set up access to web services to extract server logs.

If the site has not set up access to server logs so the logs can be stored on another server for analysis and reporting, this is a finding.

Vulnerability Number

V-82153

Documentable

False

Rule Version

M360-10-006300

Severity Override Guidance

Verify the site has set up access to web services to extract server logs.

If the site has not set up access to server logs so the logs can be stored on another server for analysis and reporting, this is a finding.

Check Content Reference

M

Target Key

3403

Comments