The UEM server must be configured to record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-234516SRG-APP-000374-UEM-000244SV-234516r961443_ruleCCI-001890medium
Description
If time stamps are not consistently applied and there is no common time reference, it is difficult to perform forensic analysis. Time stamps generated by the application include date and time. Time is commonly expressed in UTC, a modern continuation of GMT, or local time with an offset from UTC. Satisfies:FAU_GEN.1.2(1)
STIGDate
Unified Endpoint Management Server Security Requirements Guide2024-12-09

Related Frameworks

3 paths across 3 frameworks
NIST 800-531 mapping
AU-8
1.00
  • DISA · 2 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1711 mapping
3.3.7
1.00
  • DISA · 2 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-001890
1.00
  • DISA · 2 · disa_xccdf · related

Details

Check Text (C-234516r961443_chk)

Verify the UEM server records time stamps for audit records that can be mapped to UTC or GMT. If the UEM server does not record time stamps for audit records that can be mapped to UTC or GMT, this is a finding.

Fix Text (F-37666r615192_fix)

Configure the UEM server to be configured to record time stamps for audit records that can be mapped to UTC or GMT.