Secure Controls Framework

1,534 controls across 34 domains

Source: SCF 2026.2About SCF
securecontrolsframework.com
Back to catalog
MON-07.1MONContinuous Monitoring

Synchronization With Authoritative Time Source

Description

Mechanisms exist to synchronize internal system clocks with an authoritative time source.

Cross-Mappings

154 paths across 3 frameworks
NIST 800-532 mappings
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
SC-45
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
CCI6 mappings
CCI-004923
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004924
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004925
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004926
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004927
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004922
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
STIG99 mappings
SV-203711r1038944_ruleThe operating system must, for networked systems, compare internal information system clocks at least every 24 hours with an authoritative time source.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 3 · disa_xccdf · related
SV-203712r982209_ruleThe operating system must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 3 · disa_xccdf · related
SV-204695r981588_ruleAAA Services must be configured to use at least two NTP servers to synchronize time.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · V2R2 · disa_xccdf · related
SV-204696r981589_ruleAAA Services must be configured to authenticate all NTP messages received from NTP servers and peers.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · V2R2 · disa_xccdf · related
SV-204792r981685_ruleThe application server must compare internal application server clocks at least every 24 hours with an authoritative time source.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 4 · disa_xccdf · related
SV-204793r981686_ruleThe application server must synchronize internal application server clocks to an authoritative time source when the time difference is greater than the organization-defined time period.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 4 · disa_xccdf · related
SV-205800r1051077_ruleThe Windows Server 2019 time service must synchronize with an appropriate DOD time source.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 3 · disa_xccdf · related
SV-207463r1038976_ruleThe VMM must, for networked systems, compare internal information system clocks at least every 24 hours with an authoritative time source.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 2 · disa_xccdf · related
SV-207464r984238_ruleThe VMM must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 2 · disa_xccdf · related
SV-215208r1009533_ruleAIX must provide time synchronization applications that can synchronize the system clock to external time sources at least every 24 hours.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 3 · disa_xccdf · related

+89 more (top 10 by confidence shown)

Control mappings provided by the Secure Controls Framework (SCF).

SCF

Powered by the Secure Controls Framework

The control catalog, cross-mappings, and STRM relationship data shown here are provided by the Secure Controls Framework (SCF), 2026.2. Every mapping is credited to SCF as the methodology, with the SCF reference and version stored alongside it.

© SCF Council, LLC. Secure Controls Framework content is free and shown here with attribution. securecontrolsframework.com · About SCF on STIGViewer