STIGUI
V-78645CAT II — Medium severitySV-93351r1_rule

The Tanium SQL database must be installed on a separate system.

Rule version TANS-DB-000001 · STIG v1 · 2018-07-09

Discussion

Failure to protect organizational information from data mining may result in a compromise of information.

Data storage objects include, for example, databases, database records, and database fields. Data mining prevention and detection techniques include, for example: limiting the types of responses provided to database queries; limiting the number/frequency of database queries to increase the work factor needed to determine the contents of such databases; and notifying organizational personnel when atypical database queries or accesses occur.

Check

Consult with the Tanium System Administrator to determine the server to which the SQL database has been installed and is configured.

If the SQL database is installed on the same server as the Tanium Server, this is a finding.

Fix

Move the Tanium SQL database from the Tanium Server to a separate SQL server system.

Identifiers

Group ID
V-78645
Group title
SRG-APP-000323
Rule ID
SV-93351r1_rule
Check ID
C-78215r2_chk
Fix ID
F-85381r2_fix