Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
SQL Server must generate audit records when successful and unsuccessful attempts to modify privileges/permissions occur.
Description
Discussion Text
Changes in the permissions, privileges, and roles granted to users and roles must be tracked. Without an audit trail, unauthorized elevation or restriction of privileges could go undetected. Elevated privileges give users access to information and functionality that they should not have; restricted privileges wrongly deny access to authorized users.
In an SQL environment, modifying permissions is typically done via the GRANT, REVOKE, and DENY commands.
To aid in diagnosis, it is necessary to keep track of failed attempts in addition to the successful ones.
Satisfies: SRG-APP-000495-DB-000328
In an SQL environment, modifying permissions is typically done via the GRANT, REVOKE, and DENY commands.
To aid in diagnosis, it is necessary to keep track of failed attempts in addition to the successful ones.
Satisfies: SRG-APP-000495-DB-000328
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.