Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
SQL Server must generate audit records when successful and unsuccessful attempts to delete privileges/permissions occur.
Description
Discussion Text
Changes in the permissions, privileges, and roles granted to users and roles must be tracked. Without an audit trail, unauthorized elevation or restriction of privileges could go undetected. Elevated privileges give users access to information and functionality that they should not have; restricted privileges wrongly deny access to authorized users.
In an SQL environment, deleting permissions is typically done via the REVOKE or DENY command.
To aid in diagnosis, it is necessary to keep track of failed attempts in addition to the successful ones.
In an SQL environment, deleting permissions is typically done via the REVOKE or DENY command.
To aid in diagnosis, it is necessary to keep track of failed attempts in addition to the successful ones.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.