Task 2 RMF Access Control Plan.docx_safe.pdf

3 MB Posted

Attached to
SAF/FMB Support Services Follow-on
Solicitation number
FA7014-FMBFollowon
Issued by

About this file

Written by GovTribe AI ·

This document is a sources sought notice for a follow-on requirement to provide support services to the Deputy Assistant Secretary of the Air Force for Budget (SAF/FMB). The key details are:

The services required include financial management support, budget formulation and execution support, systems support, and contingency financial operations support for SAF/FMB. The North American Industry Classification System (NAICS) code is 541219 Other Accounting Services, and the Product and Service Code (PSC) is R708. The government is requesting statements of capability from interested contractors by June 26, 2024. After reviewing the capability statements, the government plans to hold an industry review of the requirements. The purpose is to ensure industry understands the requirement and provide feedback for areas needing clarification. Additional draft acquisition documents will be posted in the near future.

View the file

Other files

File Type Posted
Task 2 RMF_System and Services Acquisition Plan.docx DOCX document
Task 2 RMF_Risk Assessment Plan.docx DOCX document
Task 2 RMF_Media Protection Plan.docx DOCX document
Task 2 RMF_Audit and Accountability Plan.docx DOCX document
Task 2 RMF_Contingency Plan.docx DOCX document
Task 2 RMF_Security Planning.docx DOCX document
Task 2 RMF_Security Assessment and Authorization Plan.docx DOCX document
Task 1 --2. dafi38-401 BPR Reference.pdf PDF
TASK_3 AFI10-403.pdf PDF
Task 2 RMF_System and Communications Protection Plan.docx DOCX document
Task 2 RMF_Identification and Authentication Plan.docx DOCX document
Task 2 RMF_Program Management Plan.docx DOCX document
DOD INSTRUCTION 8510.01.pdf PDF
TASK 3 _ DOD FMR Volume_05.pdf PDF
Task 2 RMF_Configuration Management Plan.docx DOCX document
Task 2 RMF_System and Information Integrity Plan.docx DOCX document
Task 2 RMF_Information System Maintenance Plan.docx DOCX document
Task 2 RMF_Security Awareness and Training Plan.docx DOCX document
AFI17-101.pdf_safe.pdf PDF
Task 1 --1. FM StrategicPlan_Bklet_Jun22 Objective 3.1 and 3.4 Apply.pdf PDF
Task 1 --3. FMBOI Process Overview.xlsx XLSX spreadsheet
TASK 3_FM Contingency Training SOP Apr 2022.pdf PDF
Task 2 RMF_Incident Response Plan.docx DOCX document
Task 2 RMF_Physical And Environmental Protection Plan.docx DOCX document
Task 2 RMF_Personnel Security Plan.docx DOCX document
DRAFT SAF-FMB Performance Work Statement.pdf PDF
Show all 26

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file
Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

FOR OFFICIAL USE ONLY

{ACRONYM}

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

{COMMAND}

{SYSTEM NAME} {ACRONYM}

System Version: {VERSION} eMASS# {EMASS#}

Confidentiality: {CONFIDENTIALITY} Integrity: {INTEGRITY}

Availability: {AVAILABILITY}

Department of the {SERVICE}

{LOGO}

Access Control Plan Document Version: 1.0.0

{DATE}

Prepared by: {ORGANIZATION}

DISTRIBUTION IS LIMITED TO U.S. GOVERNMENT AGENCIES AND THEIR CONTRACTORS.

OTHER REQUESTS FOR THIS DOCUMENT MUST BE REFERRED TO: {ORGANIZATION}

http://www.i-assure.com

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

Change Record Date Version Author Changes Made / Section(s) {DATE} 1.0.0 {ORGANIZATION} Initial Document

Amplifying Guidance

i. DoD Instruction 8510.01, "Risk Management Framework (RMF) for DoD Information Technology

(IT)"

ii. NIST Special Publication (SP) 800-162, “Guide to Attribute Based Access Control (ABAC)

Definition and Considerations”

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

Table of Contents

1.0 OVERVIEW

2.0 Access Control Policy and Procedures

3.0 Account Management

3.1 Automated Management

3.2 Atypical Usage

3.3 Significant Risk Accounts

3.4 Temporary Accounts

3.5 Emergency Accounts

3.6 Inactive Accounts

3.7 Account Auditing

3.7.1 Account Creation

3.7.2 Account Modification

3.7.3 Account Enabling

3.7.4 Account Disabling

3.7.5 Account Removal

3.8 Account Notification

3.8.1 Account Creation

3.8.2 Account Removal

3.8.3 Account Modification

3.8.4 Account Enabling

3.8.5 Account Disabling

3.8.6 Account Removal

3.9 Account Logout

3.10 Privileged Account Creation

3.11 Group Accounts

3.12 Account Types

3.13 System Account Management

3.13.1 Account Authorization

3.13.2 Account Approval

3.13.3 Account Maintenance

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

3.13.4 Account Monitoring

3.13.5 Account Change

3.13.6 Account Compliance Review

4.0 Access Enforcement

4.1 Logical Access Enforcement

4.2 Discretionary Access Control

5.0 Information Flow Enforcement

5.1 Internal Information Flow

5.2 External Information Flow

6.0 Separation of Duties

7.0 Least Privilege

7.1 Explicit Authorization

7.2 Non-privileged Users

7.3 Alternate Accounts

7.4 Privilege Access Restrictions

7.5 Privilege Access Review

7.6 Software Execution

7.7 Privilege Function Audit

8.0 Unsuccessful Logon Attempts

9.0 System Use Notification

9.1 Notification Display

9.2 Notification Retention

9.3 Publicly Accessible Systems

10.0 Concurrent Session Control

11.0 Session Lock

12.0 Session Termination

13.0 Permitted Actions Without Identification or Authentication

14.0 Security Attributes

15.0 Remote Access

15.1 Remote Access Monitoring

15.2 Remote Access Control

15.3 Remote Access Encryption

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

15.4 Managed Access Points

15.5 Remote Access Commands

15.6 Access to Security-relevant Information

15.7 Remote Access Protection

15.8 Remote Access Disconnect

15.9 Remote Access Methods

15.10 Remote Access Usage Restrictions

15.11 Remote Access Connection Requirements

15.12 Remote Access Implementation Guidance

15.13 Remote Access Authorization

16.0 Wireless Access

16.1 Authentication

16.2 Encryption

16.3 Configuration

16.4 Usage Restrictions

16.5 Connection Requirements

16.6 Implementation Guidance

16.7 Authorization

17.0 Access Control for Mobile Devices

17.1 Device Encryption

17.2 Usage Restrictions

17.3 Connection Requirements

17.4 Implementation Guidance

17.5 Authorization Guidance

18.0 Use of External Information Systems

18.1 Interconnection Characteristics

19.0 Information Sharing

20.0 Publicly Accessible Content

21.0 Data Mining Protection

21.1 Data Storage Objects

21.2 Data Mining Prevention

21.3 Data Mining Detection

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

APPENDIX A – DETAILED COMPLIANCE MATRIX

ENCLOSURE 1 – ACCOUNT MANAGEMENT SCRIPTS

Table 1 - SP-800-53v4 Compliance Matrix

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

1.0 OVERVIEW

Access control policies are high-level requirements that specify how access is managed and who may access information under what circumstances.

This document complies with the following requirements from NIST Special Publication 800-53 Revision 4, "Security and Privacy Controls for Federal Information Systems and Organizations". A detailed compliance matrix can be found in Appendix I, “Detailed Compliance Matrix”.

CNTL NO. CONTROL NAME PRIORITY LOW MOD HIGH

AC-1 Access Control Policy and

Procedures

P1 AC-1 AC-1 AC-1

AC-2 Account Management P1 AC-2 AC-2 (1) (2) (3) (4)

AC-2 (1) (2) (3)

(4) (5) (11) (12) (13)

AC-3 Access Enforcement P1 AC-3 AC-3 AC-3 AC-4 Information Flow

Enforcement P1 Not Selected AC-4 AC-4

AC-5 Separation of Duties P1 Not Selected AC-5 AC-5 AC-6 Least Privilege P1 Not Selected AC-6 (1) (2) (5)

(9) (10)

AC-6 (1) (2) (3)

(5) (9) (10)

AC-7 Unsuccessful Logon Attempts P2 AC-7 AC-7 AC-7 AC-8 System Use Notification P1 AC-8 AC-8 AC-8 AC-9 Previous Logon (Access)

Notification P0 Not Selected Not Selected Not Selected

AC-10 Concurrent Session Control P3 Not Selected Not Selected AC-10 AC-11 Session Lock P3 Not Selected AC-11 (1) AC-11 (1) AC-12 Session Termination P2 Not Selected AC-12 AC-12 AC-13 Supervision and Review -

Access Control Not Selected

Not Selected Not Selected Not Selected

AC-14 Permitted Actions Without Identification or Authentication

P3 AC-14 AC-14 AC-14

AC-15 Automated Marking Not Selected

Not Selected Not Selected Not Selected

AC-16 Security Attributes P0 Not Selected Not Selected Not Selected AC-17 Remote Access P1 AC-17 AC-17 (1) (2) (3)

(4)

AC-17 (1) (2) (3)

(4)

AC-18 Wireless Access P1 AC-18 AC-18 (1) AC-18 (1) (4) (5) AC-19 Access Control for Mobile

Devices

P1 AC-19 AC-19 (5) AC-19 (5)

AC-20 Use of External Information Systems

P1 AC-20 AC-20 (1) (2) AC-20 (1) (2)

AC-21 Information Sharing P2 Not Selected AC-21 AC-21 AC-22 Publicly Accessible Content P3 AC-22 AC-22 AC-22 AC-23 Data Mining Protection P0 Not Selected Not Selected Not Selected AC-24 Access Control Decisions P0 Not Selected Not Selected Not Selected AC-25 Reference Monitor P0 Not Selected Not Selected Not Selected

Table 1 - SP-800-53v4 Compliance Matrix

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

2.0 Access Control Policy and Procedures

This {ACRONYM} Access Control Plan addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance. This plan has been disseminated to the {ACRONYM} system team, ISSO and ISSM via eMASS and will be updated annually.

3.0 Account Management

The following sections detail how {ACRONYM} manages user and system accounts.

3.1 Automated Management

Automated account management enables consistent and accurate user credential information across multiple information systems. Most solutions utilize Microsoft Active Directory, Directory Server or backend database.

Does {ACRONYM} utilize an automated account management solution?

☐ No ☐ Yes: Enter name of automated solution.

3.2 Atypical Usage

{ACRONYM} has identified the following atypical account usage:

� account activity occurring after hours or on weekends

� rapid logon/logoff

� multiple logons by same user

� failed access permissions

� elevated rights

All identified instances if atypical usage must be reported to the ISSO immediately.

3.3 Significant Risk Accounts

{ACRONYM} identifies users posing a significant risk through monitoring. These types of users may have a history of inappropriate behavior. In the event {ACRONYM} identifies this user type, the following process will be followed:

1. Disable account within 30 minutes

2. Contact the ISSO

3. Ensure user does not have alternate accounts. If they exist, disable those accounts also

3.4 Temporary Accounts

In some cases, {ACRONYM} will create temporary accounts for testing or to support mission needs.

These accounts will be identified as temporary and disabled/removed after 72 hours.

Does {ACRONYM} automatically remove/disable temporary accounts after 72 hours?

☐ No

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

☐ Yes: Identify technology used to automate

If no, delete the following information.

{ACRONYM} is configured to automatically remove/disable temporary accounts after 72 hours through implementation of the following STIG/SRG requirements:

DELETE N/A STIGS

STIG Source Title Vuln ID CCI Verification Method Apple OS X 10.10 (Yosemite) Workstation STIG V1R3

SRG-OS-000002 V-59555 CCI-000016

Apple OS X 10.11 STIG V1R1 SRG-OS-000002-GPOS-00002 V-67511 CCI-000016 Apple OS X 10.8 (Mountain Lion) Workstation STIG V1R2

SRG-OS-000002 V-51195 CCI-000016

Apple OS X 10.9 (Mavericks) Workstation STIG V1R1

SRG-OS-000002 V-58283 CCI-000016

F5 BIG-IP Device Management 11.x STIG V1R2

SRG-APP-000024-NDM-

000206

V-60097 CCI-000016

General Purpose Operating System SRG V1R4

SRG-OS-000002-GPOS-00002 V-56575 CCI-000016

Mainframe Product Security Requirements Guide V1R1

SRG-APP-000024-MFP-

000036

V-68131 CCI-000016

Network Device Management Security Requirements Guide V2R6

SRG-APP-000024-NDM-

000206

V-55039 CCI-000016

Oracle Database 11.2g STIG V1R8

SRG-APP-000024-DB-000002 V-52351 CCI-000016

Oracle Database 11.2g STIG V1R8

SRG-APP-000024-DB-000003 V-52353 CCI-000016

Oracle Database 12c STIG V1R4

SRG-APP-000024-DB-000002 V-61559 CCI-000016

Oracle Database 12c STIG V1R4

SRG-APP-000024-DB-000003 V-61561 CCI-000016

Oracle Linux 6 STIG V1R7 SRG-OS-000002 V-50991 CCI-000016 Red Hat Enterprise Linux 6

STIG V1R12

SRG-OS-000002 V-38685 CCI-000016

Solaris 11 SPARC STIG V1R8 SRG-OS-000002 V-47949 CCI-000016 Solaris 11 X86 STIG V1R8 SRG-OS-000002 V-47949 CCI-000016 Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

WINGE-000056 V-57653 CCI-000016

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

WINGE-000056 V-57653 CCI-000016

3.5 Emergency Accounts

{ACRONYM} contains emergency accounts to ensure access to the system in the event primary accounts are unavailable.

Has {ACRONYM} been configured to never automatically disable/remove emergency accounts?

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

☐ No ☐ Yes

If no, delete the following information.

{ACRONYM} is configured to never automatically disable/remove emergency accounts through implementation of the following STIG/SRG requirements:

DELETE N/A STIGS

STIG Source Title Vuln ID CCI Verification Method Apple OS X 10.10 (Yosemite) Workstation STIG V1R3

SRG-OS-000002 V-59555 CCI-000016

Apple OS X 10.10 (Yosemite) Workstation STIG V1R3

SRG-OS-000123 V-59557 CCI-001682

Apple OS X 10.11 STIG V1R1 SRG-OS-000123-GPOS-00064 V-67521 CCI-001682 Apple OS X 10.8 (Mountain Lion) Workstation STIG V1R2

SRG-OS-000123 V-51515 CCI-001682

Apple OS X 10.9 (Mavericks) Workstation STIG V1R1

SRG-OS-000123 V-58285 CCI-001682

F5 BIG-IP Device Management 11.x STIG V1R2

SRG-APP-000234-NDM-

000272

V-60171 CCI-001682

General Purpose Operating System SRG V1R4

SRG-OS-000123-GPOS-00064 V-56805 CCI-001682

Mainframe Product Security Requirements Guide V1R1

SRG-APP-000234-MFP-

000037

V-68133 CCI-001682

Network Device Management Security Requirements Guide V2R6

SRG-APP-000234-NDM-

000272

V-55175 CCI-001682

Oracle Database 11.2g STIG V1R8

SRG-APP-000234-DB-000157 V-52149 CCI-001682

Oracle Database 12c STIG V1R4

SRG-APP-000234-DB-000157 V-61777 CCI-001682

Oracle Linux 6 STIG V1R7 SRG-OS-000123 V-50993 CCI-001682 Red Hat Enterprise Linux 6

STIG V1R12

SRG-OS-000123 V-38690 CCI-001682

Solaris 11 SPARC STIG V1R8 SRG-OS-000123 V-48085 CCI-001682 Solaris 11 X86 STIG V1R8 SRG-OS-000123 V-48085 CCI-001682 VMware vSphere ESXi 6.0

STIG V1R2

SRG-OS-000123-VMM-

000620

V-63465 CCI-001682

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

WINGE-000057 V-57655 CCI-001682

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

WINGE-000057 V-57655 CCI-001682

3.6 Inactive Accounts

Inactive accounts are those accounts that have not been logged into for over 35 days.

Is {ACRONYM} configured to disable inactive accounts after 35 days?

☐ No: Document approved exception.

☐ Yes

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

If no, delete the following information.

{ACRONYM} is configured to disable inactive accounts after 35 days through implementation of the following STIG/SRG requirements:

DELETE N/A STIGS

STIG Source Title Vuln ID CCI Verification Method

AIX 5.3 STIG V1R3 GEN000760 V-918 CCI-000017

AIX 6.1 STIG V1R8 GEN000760 V-918 CCI-000017

F5 BIG-IP Device Management 11.x STIG V1R2

SRG-APP-000025-NDM-

000207

V-60099 CCI-000017

HP FlexFabric Switch NDM

STIG V1R1

SRG-APP-000025-NDM-

000207

V-66141 CCI-000017

Mainframe Product Security Requirements Guide V1R1

SRG-APP-000025-MFP-

000038

V-68135 CCI-000017

Network Device Management Security Requirements Guide V2R6

SRG-APP-000025-NDM-

000207

V-55041 CCI-000017

Oracle Database 11.2g STIG V1R8

SRG-APP-000163-DB-000113 V-52269 CCI-000017,

CCI-000795

Oracle Linux 5 STIG V1R7 GEN000760 V-918 CCI-000017 Oracle Linux 5 STIG V1R7 GEN006660 V-38692 CCI-000017 Oracle Linux 6 STIG V1R7 SRG-OS-000003 V-51129 CCI-000017 Red Hat Enterprise Linux 6

STIG V1R12

GEN006660 V-38692 CCI-000017

Red Hat Enterprise Linux 6

STIG V1R12

GEN006660 V-38692 CCI-000017

SUSE Linux Enterprise Server v11 for System z V1R7

GEN000760 V-918 CCI-000017

SOLARIS 10 SPARC STIG

V1R15

GEN000760 V-918 CCI-000017

SOLARIS 10 X86 STIG V1R15 GEN000760 V-918 CCI-000017

Solaris 11 SPARC STIG V1R8 SRG-OS-000003 V-48079 CCI-000017 Solaris 11 X86 STIG V1R8 SRG-OS-000003 V-48079 CCI-000017

SOLARIS 9 X86 STIG V1R9 GEN000760 V-918 CCI-000017

Voice Video Session Management Security Requirements Guide V1R1

SRG-NET-000004 V-62049 CCI-000017

3.7 Account Auditing

Account auditing monitors and identifies actions taken regarding the user account subsystem.

3.7.1 Account Creation

Does {ACRONYM} automatically audit account creation actions?

☐ No ☐ Yes

If no, delete the following information.

{ACRONYM} is configured to automatically audit account creation actions through implementation of the following STIG/SRG requirements:

DELETE N/A STIGS

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

AIX 5.3 STIG V1R3 GEN002750 V-22376 CCI-000018

AIX 6.1 STIG V1R8 GEN002750 V-22376 CCI-000018

Apple OS X 10.10 (Yosemite) Workstation STIG V1R3

SRG-OS-000004 V-59559 CCI-000018

Apple OS X 10.11 STIG V1R1 SRG-OS-000004-GPOS-00004 V-67523 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002234, CCI-002884

Apple OS X 10.8 (Mountain Lion) Workstation STIG V1R2

SRG-OS-000004 V-51437 CCI-000018

Apple OS X 10.9 (Mavericks) Workstation STIG V1R1

SRG-OS-000004 V-58287 CCI-000018

Arista MLS DCS-7000 Series

NDM STIG V1R2

SRG-APP-000026-NDM-

000208

V-60835 CCI-000018

F5 BIG-IP Device Management 11.x STIG V1R2

SRG-APP-000026-NDM-

000208

V-60103 CCI-000018

General Purpose Operating System SRG V1R4

SRG-OS-000004-GPOS-00004 V-56577 CCI-000018

HP-UX 11.23 STIG V1R9 GEN002750 V-22376 CCI-000018

HP-UX 11.31 STIG V1R12 GEN002750 V-22376 CCI-000018

HP FlexFabric Switch NDM

STIG V1R1

SRG-APP-000026-NDM-

000208

V-66143 CCI-000018

Juniper SRX SG NDM STIG V1R1

SRG-APP-000026-NDM-

000208

V-66459 CCI-000018

Mainframe Product Security Requirements Guide V1R1

SRG-APP-000026-MFP-

000039

V-68137 CCI-000018

Network Device Management Security Requirements Guide V2R6

SRG-APP-000026-NDM-

000208

V-55043 CCI-000018

Oracle Database 11.2g STIG V1R8

SRG-APP-000026-DB-000005 V-52357 CCI-000018

Oracle Database 12c STIG V1R4

SRG-APP-000026-DB-000005 V-61565 CCI-000018

Oracle Linux 5 STIG V1R7 GEN002750 V-22376 CCI-000018 Oracle Linux 6 STIG V1R7 SRG-OS-000004 V-51073 CCI-000018 Oracle WebLogic Server 12c

STIG V1R2

SRG-APP-000026-AS-000018 V-56215 CCI-000018

Red Hat Enterprise Linux 5

STIG V1R16

GEN002750 V-22376 CCI-000018

Red Hat Enterprise Linux 6

STIG V1R12

SRG-OS-000004 V-38531 CCI-000018

Red Hat Enterprise Linux 6

STIG V1R12

SRG-OS-000004 V-38531 CCI-000018

Riverbed SteelHead CX v8

NDM STIG V1R1

SRG-APP-000026-NDM-

000208

V-62839 CCI-000018

SUSE Linux Enterprise Server v11 for System z V1R7

GEN002750 V-22376 CCI-000018

SOLARIS 10 SPARC STIG

V1R15

GEN002750 V-22376 CCI-000018

SOLARIS 10 X86 STIG V1R15 GEN002750 V-22376 CCI-000018

Solaris 11 SPARC STIG V1R8 SRG-OS-000004 V-47807 CCI-000018

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method Solaris 11 X86 STIG V1R8 SRG-OS-000004 V-47807 CCI-000018 Trend Micro Deep Security 9.x

STIG V1R1

SRG-APP-000026 V-65861 CCI-000018

Windows 10 STIG V1R5 WN10-AU-000025 V-63443 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows 10 STIG V1R5 WN10-AU-000030 V-63445 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows 10 STIG V1R5 WN10-AU-000035 V-63447 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows 10 STIG V1R5 WN10-AU-000040 V-63449 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

3.7.2 Account Modification

Does {ACRONYM} automatically audit account modification actions?

☐ No ☐ Yes

If no, delete the following information.

{ACRONYM} is configured to automatically audit account modification actions through implementation of the following STIG/SRG requirements:

DELETE N/A STIGS

STIG Source Title Vuln ID CCI Verification Method

AIX 5.3 STIG V1R3 GEN002751 V-22377 CCI-001403

AIX 6.1 STIG V1R8 GEN002751 V-22377 CCI-001403

Apple OS X 10.10 (Yosemite) Workstation STIG V1R3

SRG-OS-000239 V-59561 CCI-001403

Apple OS X 10.11 STIG V1R1 SRG-OS-000004-GPOS-00004 V-67523 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002234, CCI-002884

Apple OS X 10.8 (Mountain Lion) Workstation STIG V1R2

SRG-OS-000239 V-51405 CCI-001403

Apple OS X 10.9 (Mavericks) Workstation STIG V1R1

SRG-OS-000239 V-58289 CCI-001403

Arista MLS DCS-7000 Series

NDM STIG V1R2

SRG-APP-000027-NDM-

000209

V-60837 CCI-001403

F5 BIG-IP Device Management 11.x STIG V1R2

SRG-APP-000027-NDM-

000209

V-60105 CCI-001403

General Purpose Operating System SRG V1R4

SRG-OS-000239-GPOS-00089 V-56913 CCI-001403

HP-UX 11.23 STIG V1R9 GEN002751 V-22377 CCI-001403

HP-UX 11.31 STIG V1R12 GEN002751 V-22377 CCI-001403

HP FlexFabric Switch NDM

STIG V1R1

SRG-APP-000027-NDM-

000209

V-66145 CCI-001403

Juniper SRX SG NDM STIG V1R1

SRG-APP-000027-NDM-

000209

V-66461 CCI-001403

Mainframe Product Security Requirements Guide V1R1

SRG-APP-000027-MFP-

000040

V-68139 CCI-001403

Network Device Management Security Requirements Guide V2R6

SRG-APP-000027-NDM-

000209

V-55045 CCI-001403

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method Oracle Database 11.2g STIG V1R8

SRG-APP-000027-DB-000186 V-52359 CCI-001403

Oracle Database 12c STIG V1R4

SRG-APP-000027-DB-000186 V-61569 CCI-001403

Oracle Linux 5 STIG V1R7 GEN002751 V-22377 CCI-001403 Oracle Linux 6 STIG V1R7 SRG-OS-000239 V-51077 CCI-001403 Oracle WebLogic Server 12c

STIG V1R2

SRG-APP-000027-AS-000019 V-56217 CCI-001403

Red Hat Enterprise Linux 5

STIG V1R16

GEN002751 V-22377 CCI-001403

Red Hat Enterprise Linux 6

STIG V1R12

SRG-OS-000239 V-38534 CCI-001403

Red Hat Enterprise Linux 6

STIG V1R12

SRG-OS-000239 V-38534 CCI-001403

Riverbed SteelHead CX v8

NDM STIG V1R1

SRG-APP-000027-NDM-

000209

V-62841 CCI-001403

SUSE Linux Enterprise Server v11 for System z V1R7

GEN002751 V-22377 CCI-001403

SOLARIS 10 SPARC STIG

V1R15

GEN002751 V-22377 CCI-001403

SOLARIS 10 X86 STIG V1R15 GEN002751 V-22377 CCI-001403

Solaris 11 SPARC STIG V1R8 SRG-OS-000239 V-47809 CCI-001403 Solaris 11 X86 STIG V1R8 SRG-OS-000239 V-47809 CCI-001403 Microsoft SQL Server 2012 Database Instance STIG V1R11

SRG-APP-000027-DB-000186 V-41306 CCI-001403

Trend Micro Deep Security 9.x

STIG V1R1

SRG-APP-000027 V-65863 CCI-001403

Windows 10 STIG V1R5 WN10-AU-000025 V-63443 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows 10 STIG V1R5 WN10-AU-000030 V-63445 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows 10 STIG V1R5 WN10-AU-000035 V-63447 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows 10 STIG V1R5 WN10-AU-000040 V-63449 CCI-000018, CCI-000172, CCI-001403, CCI-001404, ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Audit - User Account V-26538 CCI-000018, ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method Member Server STIG V1R22 Management - Failure CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

3.7.3 Account Enabling

Does {ACRONYM} automatically audit account enabling actions?

☐ No ☐ Yes

If no, delete the following information.

{ACRONYM} is configured to automatically audit account enabling actions through implementation of the following STIG/SRG requirements:

DELETE N/A STIGS

STIG Source Title Vuln ID CCI Verification Method F5 BIG-IP Device Management 11.x STIG V1R2

SRG-APP-000319-NDM-

000283

V-60187 CCI-002130

General Purpose Operating System SRG V1R4

SRG-OS-000303-GPOS-00120 V-57221 CCI-002130

HP FlexFabric Switch NDM

STIG V1R1

SRG-APP-000319-NDM-

000283

V-66227 CCI-002130

IBM DataPower Network Device Management STIG V1R1

SRG-APP-000319-NDM-

000283

V-65127 CCI-002130

Juniper SRX SG NDM STIG V1R1

SRG-APP-000319-NDM-

000283

V-66469 CCI-002130

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method Mainframe Product Security Requirements Guide V1R1

SRG-APP-000319-MFP-

000047

V-68153 CCI-002130

Network Device Management Security Requirements Guide V2R6

SRG-APP-000319-NDM-

000283

V-55203 CCI-002130

Trend Micro Deep Security 9.x

STIG V1R1

SRG-APP-000319 V-65957 CCI-002130

Windows 10 STIG V1R5 WN10-AU-000025 V-63443 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows 10 STIG V1R5 WN10-AU-000030 V-63445 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows 10 STIG V1R5 WN10-AU-000035 V-63447 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows 10 STIG V1R5 WN10-AU-000040 V-63449 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

3.7.4 Account Disabling

Does {ACRONYM} automatically audit account disabling actions?

☐ No ☐ Yes

If no, delete the following information.

{ACRONYM} is configured to automatically audit account disabling actions through implementation of the following STIG/SRG requirements:

DELETE N/A STIGS

STIG Source Title Vuln ID CCI Verification Method

AIX 5.3 STIG V1R3 GEN002752 V-22378 CCI-001404

AIX 6.1 STIG V1R8 GEN002752 V-22378 CCI-001404

Apple OS X 10.10 (Yosemite) Workstation STIG V1R3

SRG-OS-000240 V-59563 CCI-001404

Apple OS X 10.11 STIG V1R1 SRG-OS-000004-GPOS-00004 V-67523 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002234, CCI-002884

Apple OS X 10.8 (Mountain Lion) Workstation STIG V1R2

SRG-OS-000240 V-51407 CCI-001404

Apple OS X 10.9 (Mavericks) Workstation STIG V1R1

SRG-OS-000240 V-58291 CCI-001404

Arista MLS DCS-7000 Series

NDM STIG V1R2

SRG-APP-000028-NDM-

000210

V-60839 CCI-001404

F5 BIG-IP Device Management 11.x STIG V1R2

SRG-APP-000028-NDM-

000210

V-60107 CCI-001404

General Purpose Operating System SRG V1R4

SRG-OS-000240-GPOS-00090 V-56917 CCI-001404

HP-UX 11.23 STIG V1R9 GEN002752 V-22378 CCI-001404

HP-UX 11.31 STIG V1R12 GEN002752 V-22378 CCI-001404

HP FlexFabric Switch NDM

STIG V1R1

SRG-APP-000028-NDM-

000210

V-66147 CCI-001404

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method Juniper SRX SG NDM STIG V1R1

SRG-APP-000028-NDM-

000210

V-66463 CCI-001404

Mainframe Product Security Requirements Guide V1R1

SRG-APP-000028-MFP-

000041

V-68141 CCI-001404

Network Device Management Security Requirements Guide V2R6

SRG-APP-000028-NDM-

000210

V-55047 CCI-001404

Oracle Database 11.2g STIG V1R8

SRG-APP-000028-DB-000187 V-52361 CCI-001404

Oracle Database 12c STIG V1R4

SRG-APP-000028-DB-000187 V-61571 CCI-001404

Oracle Linux 5 STIG V1R7 GEN002752 V-22378 CCI-001404 Oracle Linux 6 STIG V1R7 SRG-OS-000240 V-51083 CCI-001404 Red Hat Enterprise Linux 5

STIG V1R16

GEN002752 V-22378 CCI-001404

Red Hat Enterprise Linux 6

STIG V1R12

SRG-OS-000240 V-38536 CCI-001404

Red Hat Enterprise Linux 6

STIG V1R12

SRG-OS-000240 V-38536 CCI-001404

Riverbed SteelHead CX v8

NDM STIG V1R1

SRG-APP-000028-NDM-

000210

V-62843 CCI-001404

SUSE Linux Enterprise Server v11 for System z V1R7

GEN002752 V-22378 CCI-001404

SOLARIS 10 SPARC STIG

V1R15

GEN002752 V-22378 CCI-001404

SOLARIS 10 X86 STIG V1R15 GEN002752 V-22378 CCI-001404

Solaris 11 SPARC STIG V1R8 SRG-OS-000240 V-47811 CCI-001404 Solaris 11 X86 STIG V1R8 SRG-OS-000240 V-47811 CCI-001404 Trend Micro Deep Security 9.x

STIG V1R1

SRG-APP-000028 V-65865 CCI-001404

Windows 10 STIG V1R5 WN10-AU-000025 V-63443 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows 10 STIG V1R5 WN10-AU-000030 V-63445 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows 10 STIG V1R5 WN10-AU-000035 V-63447 CCI-000018, CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows 10 STIG V1R5 WN10-AU-000040 V-63449 CCI-000018, CCI-000172, CCI-001403, ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Domain Controller STIG V1R21

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Member Server STIG V1R22

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2008 R2 Audit - User Account V-26538 CCI-000018, ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method Member Server STIG V1R22 Management - Failure CCI-000172, CCI-001403, CCI-001404, CCI-001405, CCI-002130, CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows Server 2012 / 2012 R2 Member Server STIG V2R5

Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 7 STIG V1R29 Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - Security Group Management - Success

V-26535 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

ACCESS CONTROL PLAN {DATE}

Template developed by:

http://www.i-assure.com FOR OFFICIAL USE ONLY

STIG Source Title Vuln ID CCI Verification Method

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - Security Group Management - Failure

V-26536 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - User Account Management - Success

V-26537 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

Windows 8 / 8.1 STIG V1R15 Audit - User Account Management - Failure

V-26538 CCI-000018,

CCI-000172,

CCI-001403,

CCI-001404,

CCI-001405,

CCI-002130,

CCI-002234

3.7.5 Account Removal

Does {ACRONYM} automatically audit account removal actions?

☐ No ☐ Yes

If no, delete the following information.

{ACRONYM} is configured to automatically audit account removal actions through implementation of the following STIG/SRG…

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .