Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-35345 | SRG-APP-000110-MAPP-NA | SV-46632r1_rule | Medium |
Description |
---|
Successful incident response and auditing relies on timely, accurate system information and analysis in order to allow the organization to identify and respond to potential incidents in a proficient manner. Audit review, analysis and reporting are all activities related to the evaluation of system activity through the inspection and analysis of system log data. Some examples include but are not limited to: organizational requirements to cooperate with legal counsel and/or auditors in order to provide reports on certain types of system activity or analyzing system logs to ascertain sources or causes of certain system activity. Rationale for non-applicability: This control is required in the MDM SRG. Mobile applications can leverage the audit review, analysis, and reporting tools of centralized logging systems. |
STIG | Date |
---|---|
Mobile Application Security Requirements Guide | 2013-01-04 |
Check Text ( C-43713r1_chk ) |
---|
This requirement is NA for the MAPP SRG. |
Fix Text (F-39891r1_fix) |
---|
e requirement is NA. No fix is required. |