The network device must off-load audit records onto a different system or media than the system being audited.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-202127SRG-APP-000515-NDM-000325SV-202127r961860_ruleCCI-001851medium
Description
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.
STIGDate
Network Device Management Security Requirements Guide2025-02-11

Related Frameworks

2 paths across 2 frameworks
NIST 800-531 mapping
  • DISA · V5R3 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI1 mapping
CCI-001851
1.00
  • DISA · V5R3 · disa_xccdf · related

Details

Check Text (C-202127r961860_chk)

Check the network device configuration to determine if the device off-loads audit records onto a different system or media than the system being audited. If the device does not off-load audit records onto a different system or media, this is a finding.

Fix Text (F-2254r382062_fix)

Configure the network device to off-load audit records onto a different system or media than the system being audited.