The VMM must off-load audit records onto a different system or media than the system being audited.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-207453	SRG-OS-000342-VMM-001230	SV-207453r854624_rule		Medium

Description
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in VMMs with limited audit storage capacity.

STIG	Date
Virtual Machine Manager Security Requirements Guide	2023-09-12

Details

Check Text ( C-7710r365763_chk )
Verify the VMM off-loads audit records onto a different system or media than the system being audited. If it does not, this is a finding.

Fix Text (F-7710r365764_fix)
Configure the VMM to off-load audit records onto a different system or media than the system being audited.