The DNS server implementation must implement the capability to centrally review and analyze audit records from multiple components within the system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-263625	SRG-APP-000745-DNS-000120	SV-263625r982515_rule	CCI-003821	medium
Description
Automated mechanisms for centralized reviews and analyses include Security Information and Event Management products.
STIG			Date
Domain Name System (DNS) Security Requirements Guide			2024-07-02

Related Frameworks

1 mapping across 3 frameworks

SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

MON-02.2Central Review & Analysis

1.00

DISA STIG Benchmark (XCCDF)4intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)
SCF Secure Traceability Relationship Mapping (STRM)2026.2equal to

NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (14) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-2(4)Automated Audit Actions

1.00

DISA STIG Benchmark (XCCDF)4intersects(normalised)
DISA STIG Benchmark (XCCDF)V1R1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V1R1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AU-12(3)Changes by Authorized Individuals

1.00

DISA STIG Benchmark (XCCDF)4intersects(normalised)
DISA STIG Benchmark (XCCDF)1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AU-4(1)Transfer to Alternate Storage

1.00

DISA STIG Benchmark (XCCDF)4intersects(normalised)
DISA STIG Benchmark (XCCDF)1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AU-5Response to Audit Logging Process Failures

1.00

DISA STIG Benchmark (XCCDF)4intersects(normalised)
DISA STIG Benchmark (XCCDF)V1R1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V1R1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AU-5(2)Real-time Alerts

1.00

DISA STIG Benchmark (XCCDF)4intersects(normalised)
DISA STIG Benchmark (XCCDF)V1R1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V1R1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AU-6(4)Central Review and Analysis

1.00

DISA STIG Benchmark (XCCDF)4intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AU-7Audit Record Reduction and Report Generation

1.00

DISA STIG Benchmark (XCCDF)4intersects(normalised)
DISA STIG Benchmark (XCCDF)1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AU-7(1)Automatic Processing

1.00

DISA STIG Benchmark (XCCDF)4intersects(normalised)
DISA STIG Benchmark (XCCDF)1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AU-9Protection of Audit Information

1.00

DISA STIG Benchmark (XCCDF)4intersects(normalised)
DISA STIG Benchmark (XCCDF)1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AU-9(2)Store on Separate Physical Systems or Components

1.00

DISA STIG Benchmark (XCCDF)4intersects(normalised)
DISA STIG Benchmark (XCCDF)1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

+4 more (top 10 by confidence shown)

CCI1 mapping

CCI-003821

1.00

DISA STIG Benchmark (XCCDF)4intersects(normalised)

Details

Check Text (C-263625r982515_chk)

Verify the DNS server implementation is configured to implement the capability to centrally review and analyze audit records from multiple components within the system. If the DNS server implementation is not configured to implement the capability to centrally review and analyze audit records from multiple components within the system, this is a finding.

Fix Text (F-67433r982036_fix)

Configure the DNS server implementation to implement the capability to centrally review and analyze audit records from multiple components within the system.