CA VM:Secure product audit records must be offloaded on a weekly basis.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-237939	IBMZ-VM-000950	SV-237939r851947_rule		Medium

Description

Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.

STIG	Date
IBM zVM Using CA VM:Secure Security Technical Implementation Guide	2022-08-31

Details

Check Text (C-41149r649655_chk)

Check audit offload procedure.

If it can be determined that the audit records are being offloaded on a weekly basis, this is not a finding.

Fix Text (F-41108r649656_fix)

Develop procedures that offload Audit minidisk on a weekly basis.