Navigate

Check: SRG-APP-000745-CTR-000120

Container Platform SRG: SRG-APP-000745-CTR-000120 (in versions v2 r2 through v2 r1)

Title

The container platform must implement the capability to centrally review and analyze audit records from multiple components within the system. (Cat II impact)

Discussion

Automated mechanisms for centralized reviews and analyses include Security Information and Event Management products.

Check Content

Verify the container platform is configured to implement the capability to centrally review and analyze audit records from multiple components within the system. If the container platform is not configured to implement the capability to centrally review and analyze audit records from multiple components within the system, this is a finding.

Fix Text

Configure the container platform to implement the capability to centrally review and analyze audit records from multiple components within the system.

Additional Identifiers

Rule ID: SV-263587r982455_rule

Vulnerability ID: V-263587

Group Title: SRG-APP-000745

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-003821	Implement the capability to centrally review and analyze audit records from multiple components within the system.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
No controls are assigned to this check