OpenControls Logo

STIG Viewer

STIGViewer Support

For Mainframe Products providing audit record aggregation, the Mainframe Product must compile audit records from mainframe components into a system-wide audit trail that is time-correlated with a tolerance for the relationship between time stamps of individual records in the audit trail in accordance with the site security plan.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-205458SRG-APP-000086-MFP-000110SV-205458r960873_ruleCCI-000174medium
Description
Without the ability to collate records based on the time when the events occurred, the ability to perform forensic analysis and investigations across multiple components is significantly degraded. Audit trails are time-correlated if the time stamps in the individual audit records can be reliably related to the time stamps in other audit records to achieve a time ordering of the records within an organization-defined level of tolerance. This requirement applies only to Mainframe Products that provide the capability to compile system-wide audit records for multiple systems or system components.
STIGDate
Mainframe Product Security Requirements Guide2026-05-23

Related Frameworks

1 mapping across 3 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

MON-02.7System-Wide / Time-Correlated Audit Trail
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (7) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AU-10Non-repudiation
1.00
AU-12Audit Record Generation
1.00
AU-12(1)System-wide and Time-correlated Audit Trail
1.00
AU-4(1)Transfer to Alternate Storage
1.00
AU-5Response to Audit Logging Process Failures
1.00
AU-7Audit Record Reduction and Report Generation
1.00
AU-9(2)Store on Separate Physical Systems or Components
1.00
CCI1 mapping
CCI-000174
1.00

Details

Check Text (C-205458r960873_chk)

If the Mainframe Product does not perform audit record aggregation, this is not applicable. Examine configuration settings. If the Mainframe Product settings do not use the operating system clock for time stamps, this is a finding.

Fix Text (F-5724r299608_fix)

Configure the Mainframe Product to use the operating system clock for time stamps.