DISA STIGS Viewer

The VMM must off-load audit records onto a different system or media than the system being audited.

Overview

Finding ID Version Rule ID IA Controls Severity
V-207453 SRG-OS-000342-VMM-001230 SV-207453r958754_rule   Medium
Description
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in VMMs with limited audit storage capacity.
STIG Date
Virtual Machine Manager Security Requirements Guide 2024-12-06

Details

Check Text (C-7710r365763_chk)
Verify the VMM off-loads audit records onto a different system or media than the system being audited.

If it does not, this is a finding.
Fix Text (F-7710r365764_fix)
Configure the VMM to off-load audit records onto a different system or media than the system being audited.