Applications related to incident tracking must support organizational requirements to employ automated mechanisms to assist in the tracking of security incidents.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35508	SRG-APP-000182-MAPP-NA	SV-46795r1_rule		Medium

Description
Incident tracking is a method of monitoring networks and systems for activity indicative of viral infection or system attack. Monitoring for this type of activity provides the organization with the capability to proactively detect and respond to attacks. Automated mechanisms for tracking security incidents and collecting/analyzing incident information include, the Einstein network monitoring device and monitoring online Computer Incident Response Centers (CIRCs) or other electronic databases of incidents. Rationale for non-applicability: The MDM SRG covers the centralized management of audit logs and alerts, which is closely integrated with tracking of security incidents.

Description

Incident tracking is a method of monitoring networks and systems for activity indicative of viral infection or system attack. Monitoring for this type of activity provides the organization with the capability to proactively detect and respond to attacks. Automated mechanisms for tracking security incidents and collecting/analyzing incident information include, the Einstein network monitoring device and monitoring online Computer Incident Response Centers (CIRCs) or other electronic databases of incidents. Rationale for non-applicability: The MDM SRG covers the centralized management of audit logs and alerts, which is closely integrated with tracking of security incidents.

STIG	Date
Mobile Application Security Requirements Guide	2013-01-04

Details

Check Text ( C-43848r1_chk )
This requirement is NA for the MAPP SRG.

Fix Text (F-40049r1_fix)
The requirement is NA. No fix is required.