Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The BlackBerry MDM Agent must be configured to generate an audit record of required Informational level events, which may include: (See Vulnerability Discussion for list). This requirement only applies to Work space only and Work and personal - Regulated activation types and to version 10.3.3 and later of the BlackBerry OS.
Description
Discussion Text
Audit logs enable monitoring of security-relevant events and subsequent forensics when breaches occur. They help identify attacks, so that breaches can either be prevented or limited in their scope. They facilitate analysis to improve performance and security.
Required events:
a. Start-up and shutdown of the audit functions;
b. Change in MDM policy;
c. Device modification commanded by the MDM server;
d. Specifically defined auditable events in Table 7 of MDM Agent EP v.2.0.
SFR ID: FAU_GEN.1.1(2) Refinement, MDM Agent EP
Required events:
a. Start-up and shutdown of the audit functions;
b. Change in MDM policy;
c. Device modification commanded by the MDM server;
d. Specifically defined auditable events in Table 7 of MDM Agent EP v.2.0.
SFR ID: FAU_GEN.1.1(2) Refinement, MDM Agent EP
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.