Rotate your device back to portrait to use STIG Vault.

Home
Dashboard
Search
STIG Repository
STIG Compare
SCAP Repository
SCAP Compare
CCIs
Guides
Contact

Appearance

Palette

Oracle Database 11g Instance STIG

The Oracle Database 11g Instance STIG (V9 R1) has 94 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

94STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V9 · R1

CurrentPublished Wed Oct 27 2021

Audit records should include the reason for blacklisting or disabling DBMS connections or accounts.

Oracle Database 11g Instance STIG

Assessment Title

Rule Text

Description

Discussion Text

Records of any disabling or locking of account actions taken by the DBMS can contain information valuable to decisions to employ additional responsive actions.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-15647

Rule

SV-24976r1_rule

Severity

medium

Rule Version

DG0146-ORACLE11

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review audit settings for disabling or locking account events based on event failures.

If the settings are not configured to include the cause of the lock or disabling, this is a Finding.

Implementation Procedure

Fix Text

Determine and implement audit settings that will collect and store the cause of any DBMS account or connection lock or disabling actions taken by the DBMS.

STIG check 36 of 94 in the Oracle Database 11g Instance STIG checklist

← Previous · V-15646Audit records should contain required information.Next · V-15654 →DBMS symmetric keys should be protected in accordance with NSA or NIST-approved key management technology or processes.