Rotate your device back to portrait to use STIG Vault.

Home
Dashboard
Search
STIG Repository
STIG Compare
SCAP Repository
SCAP Compare
CCIs
Guides
Contact

Appearance

Palette

Unified Endpoint Management Server Security Requirements Guide

The Unified Endpoint Management Server Security Requirements Guide (V2 R6) has 137 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

137STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R6

CurrentPublished Wed Sep 30 2026

The UEM server must be configured to produce audit records containing information to establish where the events occurred.

Unified Endpoint Management Server Security Requirements Guide

Assessment Title

Rule Text

Description

Discussion Text

Failure to generate these audit records makes it more difficult to identify or investigate attempted or successful compromises, potentially causing incidents to last longer than necessary.

Satisfies: FAU_GEN.1.2/AUDITGEN

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-234330

Rule

SV-234330r1212957_rule

Severity

medium

Rule Version

SRG-APP-000097-UEM-000057

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the UEM server produces audit records containing information to establish where the events occurred.

If the UEM server does not produce audit records containing information to establish where the events occurred, this is a finding.

Implementation Procedure

Fix Text

Configure the UEM server to be configured to produce audit records containing information to establish where the events occurred.

STIG check 25 of 137 in the Unified Endpoint Management Server Security Requirements Guide checklist

← Previous · V-234329The UEM server must be configured to produce audit records containing information to establish when (date and time) the events occurred.Next · V-234331 →The UEM server must be configured to produce audit records containing information to establish the source of the events.