STIGUI
V-237938CAT II — Medium severitySV-237938r851946_rule

CA VM:Secure product audit records must offload audit records to a different system or media.

Rule version IBMZ-VM-000940 · STIG v2 · 2022-08-31

Discussion

Information stored in one location is vulnerable to accidental or incidental deletion or alteration.

Off-loading is a common process in information systems with limited audit storage capacity.

Check

If there is no documented process for audit offload, this is a finding.

Examine the documented user process for audit record offload.

If the procedure does not offload to a different system or media, this is a finding.

Fix

Develop a user written procedure to offload audit records to a different system or media.

Identifiers

Group ID
V-237938
Group title
SRG-OS-000342-GPOS-00133
Rule ID
SV-237938r851946_rule
Check ID
C-41148r649652_chk
Fix ID
F-41107r649653_fix