Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The application must generate audit records for all account creations, modifications, disabling, and termination events.
Description
Discussion Text
When application user accounts are created, modified, disabled or terminated the event must be logged.
Centralized management of user accounts allows for rapid response to user related security events and also provides ease of management.
Allowing the centralized user management solution to log these events is acceptable practice; however, if the application provides a user management interface to manage these tasks, the application must also log these events.
Application developers are encouraged to integrate their applications with enterprise-level authentication/access/audit mechanisms such as Syslog, Active Directory or LDAP.
Centralized management of user accounts allows for rapid response to user related security events and also provides ease of management.
Allowing the centralized user management solution to log these events is acceptable practice; however, if the application provides a user management interface to manage these tasks, the application must also log these events.
Application developers are encouraged to integrate their applications with enterprise-level authentication/access/audit mechanisms such as Syslog, Active Directory or LDAP.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.