OpenControls Logo

STIG Viewer

STIGViewer Support

The UEM server must protect against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by nonrepudiation.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-234318SRG-APP-000080-UEM-000044SV-234318r1212943_ruleCCI-000166medium
Description
Without nonrepudiation, it is impossible to positively attribute an action to an individual (or process acting on behalf of an individual). Nonrepudiation services can be used to determine if information originated from a particular individual, or if an individual took specific actions (e.g., sending an email, signing a contract, approving a procurement request) or received specific information. Nonrepudiation protects individuals against later claims by an author of not having authored a particular document, a sender of not having transmitted a message, a receiver of not having received a message, or a signatory of not having signed a document. The application will be configured to provide nonrepudiation services for an organization-defined set of commands that are used by the user (or processes action on behalf of the user). DoW PKI provides for nonrepudiation through the use of digital signatures. Nonrepudiation requirements will vary from one application to another and will be defined based on application functionality, data sensitivity, and mission requirements. Satisfies:FCS_COP.1.1/SigGen, FCS_COP1.1/SigVer, FCS_COP.1.1/KeyedHash
STIGDate
Unified Endpoint Management Server Security Requirements Guide2026-06-11

Related Frameworks

1 mapping across 3 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

MON-09Non-Repudiation
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (53) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-11Device Lock
1.00
AC-11(1)Pattern-hiding Displays
1.00
AC-17(1)Monitoring and Control
1.00
AC-2(1)Automated System Account Management
1.00
AC-2(11)Usage Conditions
1.00
AC-2(2)Automated Temporary and Emergency Account Management
1.00
AC-2(3)Disable Accounts
1.00
AC-2(4)Automated Audit Actions
1.00
AC-3Access Enforcement
1.00
AC-3(7)Role-based Access Control
1.00

+43 more (top 10 by confidence shown)

CCI1 mapping
CCI-000166
1.00

Details

Check Text (C-234318r1212943_chk)

Verify the UEM server protects against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by nonrepudiation. If the UEM server does not protect against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by nonrepudiation this is a finding.

Fix Text (F-37468r1208001_fix)

Configure the UEM server to protect against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by nonrepudiation.