Navigate

Check: SRG-APP-000375-AAA-000330

Authentication, Authorization, and Accounting Services (AAA) SRG: SRG-APP-000375-AAA-000330 (in versions v1 r2 through v1 r1)

Title

AAA Services must be configured with a minimum granularity of one second to record time stamps for audit records. (Cat II impact)

Discussion

Without sufficient granularity of time stamps, it is not possible to adequately determine the chronological order of records. Time stamps generated by the application include date and time. Granularity of time measurements refers to the degree of synchronization between information system clocks and reference clocks.

Check Content

Verify AAA Services are configured with a minimum granularity of one second to record time stamps for audit records. If AAA Services are not configured with a minimum granularity of one second to record time stamps for audit records, this is a finding.

Fix Text

Configure AAA Services with a minimum granularity of one second to record time stamps for audit records.

Additional Identifiers

Rule ID: SV-95589r1_rule

Vulnerability ID: V-80879

Group Title: SRG-APP-000375-AAA-000330

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-001889	The information system records time stamps for audit records that meet organization-defined granularity of time measurement.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
AU-8	Time Stamps