OpenControls Logo

STIG Viewer

STIGViewer Support

The UEM server must alert the system administrator when anomalies in the operation of security functions are discovered.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-234624SRG-APP-000474-UEM-000349SV-234624r961737_ruleCCI-002702medium
Description
If anomalies are not acted upon, security functions may fail to secure the system. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters. Notifications provided by information systems include messages to local computer consoles, and/or hardware indications, such as lights. This requirement applies to applications performing security functions and the applications performing security function verification/testing. Satisfies:FAU_ALT_EXT.1.1 c.
STIGDate
Unified Endpoint Management Server Security Requirements Guide2024-12-09

Related Frameworks

1 mapping across 3 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CHG-06Control Functionality Verification
0.50
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (16) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-2(4)Automated Audit Actions
1.00
AU-10(2)Validate Binding of Information Producer Identity
1.00
AU-12Audit Record Generation
1.00
AU-4(1)Transfer to Alternate Storage
1.00
AU-5Response to Audit Logging Process Failures
1.00
AU-5(2)Real-time Alerts
1.00
AU-6(4)Central Review and Analysis
1.00
AU-7Audit Record Reduction and Report Generation
1.00
AU-7(1)Automatic Processing
1.00
AU-9Protection of Audit Information
1.00

+6 more (top 10 by confidence shown)

CCI1 mapping
CCI-002702
1.00

Details

Check Text (C-234624r961737_chk)

Verify the UEM server alerts the system administrator when anomalies in the operation of security functions are discovered. If the UEM server does not alert the system administrator when anomalies in the operation of security functions are discovered, this is a finding.

Fix Text (F-37774r615507_fix)

Configure the UEM server to alert the system administrator when anomalies in the operation of security functions are discovered.