Check: SRG-OS-000351-GPOS-00139
General Purpose Operating System SRG:
SRG-OS-000351-GPOS-00139
(in versions v3 r1 through v1 r6)
Title
The operating system must provide a report generation capability that supports on-demand reporting requirements. (Cat III impact)
Discussion
The report generation capability must support on-demand reporting in order to facilitate the organization's ability to generate incident reports, as needed, to better handle larger-scale or more complex security incidents. Report generation must be capable of generating on-demand (i.e., customizable, ad hoc, and as-needed) reports. On-demand reporting allows personnel to report issues more rapidly to more effectively meet reporting requirements. Collecting log data and aggregating it to present the data in a single, consolidated report achieves this objective.
Check Content
Verify the operating system provides a report generation capability that supports on-demand reporting requirements. If it does not, this is a finding.
Fix Text
Ensure the operating system provides a report generation capability that supports on-demand reporting requirements.
Additional Identifiers
Rule ID: SV-203707r958772_rule
Vulnerability ID: V-203707
Group Title: SRG-OS-000351
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001879 |
Provide a report generation capability that supports on-demand reporting requirements. |
Controls
Number | Title |
---|---|
AU-7 |
Audit Reduction and Report Generation |