Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Audit logs must be documented and included in backups.
Description
Discussion Text
Log files help establish a history of activities, and can be useful in detecting attack attempts or determining tuning adjustments to improve availability. Audit logs are essential to the investigation and prosecution of unauthorized access to email services software and data. Unless audit logs are available for review, the extent of data compromise may not be determined and the vulnerability exploited may not be discovered. Undiscovered vulnerabilities could lead to additional or prolonged compromise of the data.
Audit records should be backed up not less than weekly on to a different system or media than the system being audited, to ensure preservation of audit history.
Audit records should be backed up not less than weekly on to a different system or media than the system being audited, to ensure preservation of audit history.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.