Detections
Analytics

3.2.2 Ensure that the audit policy covers key security concerns

Information

Ensure that the audit policy created for the cluster covers key security concerns.

Security audit logs should cover access and modification of key resources in the cluster, to enable them to form an effective part of a security environment.

Solution

Consider modification of the audit policy in use on the cluster to include these items, at a minimum.

Impact:

Increasing audit logging will consume resources on the nodes or other log destination.

See Also

https://workbench.cisecurity.org/benchmarks/26831

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-3, 800-53|AU-3(1), 800-53|AU-7, 800-53|AU-12, CSCv7|14.9

Plugin: Unix

Control ID: 5f8771a5f20181f4ba4645bae242d922caca77aba2025d2df87cdde9a01ecf37