The VMM must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-207464 | SRG-OS-000356-VMM-001340 | SV-207464r984238_rule | CCI-004926 | medium |
| Description | ||||
| Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Synchronizing internal VMM clocks provides uniformity of time stamps for VMMs with multiple system clocks and systems connected over a network. | ||||
| STIG | Date | |||
| Virtual Machine Manager Security Requirements Guide | 2024-12-06 | |||
Related Frameworks
2 paths across 2 frameworks
Related Frameworks
NIST 800-531 mapping
SC-45(1)
1.00
- DISA · 2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI1 mapping
CCI-004926
1.00
- DISA · 2 · disa_xccdf · related
Details
Check Text (C-207464r984238_chk)
Verify the VMM synchronizes internal information system clocks to the authoritative time source when the time difference is greater than one second.
If it does not, this is a finding.
Fix Text (F-7721r365797_fix)
Configure the VMM to synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.