The Central Log Server must compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-263585	SRG-APP-000925-AU-000420	SV-263585r982451_rule	CCI-004923	medium
Description
Synchronization of internal system clocks with an authoritative source provides uniformity of time stamps for systems with multiple system clocks and systems connected over a network.
STIG			Date
Central Log Server Security Requirements Guide			2024-12-04

Related Frameworks

1 mapping across 3 frameworks

SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

MON-07.1Synchronization With Authoritative Time Source

1.00

DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)
SCF Secure Traceability Relationship Mapping (STRM)2026.2equal to

NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (9) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-17(9)Disconnect or Disable Access

1.00

DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA STIG Benchmark (XCCDF)V1R1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V1R1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AU-8Time Stamps

1.00

DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA STIG Benchmark (XCCDF)1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AU-8(1)Synchronization with Authoritative Time Source

1.00

DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA STIG Benchmark (XCCDF)3our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AU-8(2)Secondary Authoritative Time Source

1.00

DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA STIG Benchmark (XCCDF)3our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

CM-6Configuration Settings

1.00

DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA STIG Benchmark (XCCDF)V3R3our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V3R3intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

IA-3(1)Cryptographic Bidirectional Authentication

1.00

DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-45System Time Synchronization

1.00

DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA STIG Benchmark (XCCDF)1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-45(1)Synchronization with Authoritative Time Source

1.00

DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-45(2)Secondary Authoritative Time Source

1.00

DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA STIG Benchmark (XCCDF)3our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

CCI1 mapping

CCI-004923

1.00

DISA STIG Benchmark (XCCDF)3intersects(normalised)

Details

Check Text (C-263585r982451_chk)

Verify the Central Log Server is configured to compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source. If the Central Log Server is not configured to compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source, this is a finding.

Fix Text (F-67393r981839_fix)

Configure the Central Log Server to compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.