The VMM must implement cryptographic mechanisms to prevent unauthorized disclosure of all information at rest on all VMM components.

Severity
Group ID
Group Title
Version
Rule ID
Date
STIG Version
mediumV-207495SRG-OS-000405SRG-OS-000405-VMM-001660SV-207495r958872_rule2024-12-062
Description
VMMs handling data requiring "data at rest" protections must employ cryptographic mechanisms to prevent unauthorized disclosure of the information at rest. Selection of a cryptographic mechanism is based on the need to protect the integrity of organizational information. The strength of the mechanism is commensurate with the security category and/or classification of the information.
ℹ️ Check
Verify the VMM implements cryptographic mechanisms to prevent unauthorized disclosure of all information at rest on all VMM components. If it does not, this is a finding.
✔️ Fix
Configure the VMM to implement cryptographic mechanisms to prevent unauthorized disclosure of all information at rest on all VMM components.