V-254882

Discussion

Computer Groups allow a site running Tanium to assign responsibility of specific Computer Groups to specific Tanium console users. By doing so, a desktop administrator, for example, will not have the ability to enforce an action against a high visibility server. For large sites, it is crucial to have the Computer Groups. While a smaller site might not seem to require Computer Groups, creating them provides for a cleaner implementation. All sites will be required to have some kind of Computer Groups configured other than the default "All Computers".

Check Content

1. Using a web browser on a system that has connectivity to the Tanium Application, access the Tanium Application web user interface (UI) and log on with multi-factor authentication.
  
2. Click "Administration" on the top navigation banner.
  
3. Select the "Computer Groups" tab.
  
4. Under the "Name" column, verify organization-specific computer groups match the organization-defined list in the system security plan (SSP). 
  
If site- or organization-specific computer groups do not match or exist, this is a finding.