Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The Infrastructure as a Service (IaaS)/Platform as a Service (PaaS) must perform centralized logging to capture and store log records.
Description
Discussion Text
Protection of log data includes ensuring log data is not accidentally lost or deleted. Backing up audit records to a different system or onto separate media than the system being audited on an organizationally defined frequency helps to ensure that in the event of a catastrophic system failure, the audit records will be retained.
This helps to ensure that a compromise of the information system being audited does not also result in a compromise of the audit records.
For cloud service environments, security information and event management (SIEM) or syslog capability must be implemented by both Boundary and Mission Computer Network Defense (CND) service providers to log audit information.
This requirement can be met by the operating system continuously sending records to a centralized logging server.
This helps to ensure that a compromise of the information system being audited does not also result in a compromise of the audit records.
For cloud service environments, security information and event management (SIEM) or syslog capability must be implemented by both Boundary and Mission Computer Network Defense (CND) service providers to log audit information.
This requirement can be met by the operating system continuously sending records to a centralized logging server.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.