Title

Virtual machine requirements are not documented before creating a virtual machine. (Cat III impact)

Discussion

Guest operating systems may require different resources depending on the server function. A database or email server will require more resources than a basic Windows Domain Controller. Therefore, proper planning is required to determine what servers will be built within the virtualization server environment. To properly create virtual machines within the virtualization server environment, a minimal list of requirements will be determined. These requirements are the amount of memory, amount of required disk space, the networking card assignment, required media, and proper disk mode to be used.

Check Content

Request a copy of the virtual machine requirements documentation. If no documentation exists, this is a finding.

Fix Text

Develop virtual machine requirements documentation.

Additional Identifiers

Rule ID: SV-16861r1_rule

Vulnerability ID: V-15919

Group Title: Virtual machine requirements not documented

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.