Title

Local volumes must be formatted using NTFS. (Cat I impact)

Discussion

The ability to set access permissions and auditing is critical to maintaining the security and proper access controls of a system. To support this, volumes must be formatted using the NTFS file system.

Check Content

Open the Computer Management Console. Expand the "Storage" object in the left pane. Select the "Disk Management" object. If the file system column does not indicate "NTFS" as the file system for each local hard drive, this is a finding. Some hardware vendors create a small FAT partition to store troubleshooting and recovery data. No other files must be stored here. This must be documented with the ISSO.

Fix Text

Format all local partitions/drives to use NTFS.

Additional Identifiers

Rule ID: SV-48021r2_rule

Vulnerability ID: V-1081

Group Title: NTFS Requirement

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.