← Back to IBM zVM Using CA VM:Secure Security Technical Implementation Guide

V-237938

CAT II (Medium)

CA VM:Secure product audit records must offload audit records to a different system or media.

Rule ID

SV-237938r851946_rule

STIG

IBM zVM Using CA VM:Secure Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-001851

Discussion

Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.

Check Content

If there is no documented process for audit offload, this is a finding.

Examine the documented user process for audit record offload.

If the procedure does not offload to a different system or media, this is a finding.

Fix Text

Develop a user written procedure to offload audit records to a different system or media.