The Cisco ACI must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).

If time stamps are not consistently applied and there is no common time reference, it is difficult to perform forensic analysis.

Time stamps generated by the application include date and time. Time is commonly expressed in UTC or local time with an offset from UTC.

1. Navigate to System >> Settings. 2. In the Navigation pane, click "Date and Time". 3. Verify UTC is selected.

If the Cisco ACI is not configured to use the UTC time zone, this is a finding.

Configure NTP servers to provide UTC time.

1. Navigate to System >> Settings. 2. In the Navigation pane, click "Date and Time". 3. In the Work pane, choose "Display Format, then click "UTC". 4. Click "Update".