Application Security and Development Security Technical Implementation Guide

The Application Security and Development Security Technical Implementation Guide (V6 R5) has 286 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

286STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V6 · R5

CurrentPublished Wed Sep 30 2026

The system must alert an administrator when low resource conditions are encountered.

Application Security and Development Security Technical Implementation Guide

Assessment Title

Rule Text

The system must alert an administrator when low resource conditions are encountered.

Description

Discussion Text

In order to prevent DoS type attacks, applications should be monitored when resource conditions reach a predefined threshold. This could indicate the onset of a DoS attack or could be the precursor to an application outage.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-222668

Rule

SV-222668r961863_rule

Severity

medium

Rule Version

APSC-DV-003330

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the system documentation and interview the application and system administrators.

Examine the system to determine if an automated, continuous on-line monitoring and audit trail creation capability is present with the capability to immediately alert personnel of any unusual or inappropriate activity with potential IA implications, and with a user configurable capability to automatically disable the system if serious IA violations are detected.

If this monitoring capability does not exist, this is a finding.

Implementation Procedure

Fix Text

Implement mechanisms to alert system administrators about a low resource condition.

STIG check 280 of 286 in the Application Security and Development STIG checklist

← Previous · V-222667Protections against DoS attacks must be implemented.Next · V-222669 →At least one application administrator must be registered to receive update notifications, or security alerts, when automated alerts are available.