The application must record a time stamp indicating when the event occurred.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-222446APSC-DV-000670SV-222446r960879_ruleCCI-000169medium
Description
It is important to include the time stamps for when an event occurred. Failure to include time stamps in the event logs is detrimental to forensic analysis.
STIGDate
Application Security and Development Security Technical Implementation Guide2025-02-12

Related Frameworks

4 paths across 3 frameworks
NIST 800-531 mapping
AU-12
1.00
  • DISA · 6 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.3.1
1.00
  • DISA · 6 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.3.2
1.00
  • DISA · 6 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000169
1.00
  • DISA · 6 · disa_xccdf · related

Details

Check Text (C-222446r960879_chk)

Review the application logs. If the time the event occurred is not included as part of the event, this is a finding.

Fix Text (F-24105r493247_fix)

Configure the application to record the time the event occurred when recording the event.