STIGUI
V-237432CAT I — High severitySV-237432r643942_rule

The Microsoft SCOM server must be running Windows operating system that supports modern security features such as virtualization based security.

Rule version SCOM-CM-000001 · STIG v1 · 2021-03-15

Discussion

Network devices running older but supported operating systems lack modern security features that mitigate attack surfaces. Attackers face a higher level of complexity to overcome during a compromise attempt.

Check

Check the operating system version.

From the SCOM management servers, type winver and press enter. If the operating system is not Windows Server 2016 or later, this is a finding.

Fix

Upgrade the network device to an operating that supports modern security features such as virtualization based security.

Identifiers

Group ID
V-237432
Group title
SRG-APP-000516-NDM-000351
Rule ID
SV-237432r643942_rule
Check ID
C-40651r663057_chk
Fix ID
F-40614r643941_fix