1.3.12 Audit Policy: Policy Change: Audit Policy Change

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This control defines whether the audit is activated when change in audit policy including SACL changes occur.

Solution

Make sure 'Audit Policy: Policy Change: Audit Policy Change' is configured to Success and Failure.

See Also

https://workbench.cisecurity.org/files/10

Item Details

Audit Name: CIS Windows 2008 SSLF v1.2.0

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12, CCE|CCE-2268-1, CCE|CCE-2269-9, CCE|CCE-2433-1, CCE|CCE-2512-2

Plugin: Windows

Control ID: c40105377678e33fb714ced317c4b1dac91cc83275f8b3792c3206c36069a25c