1.1.2.32 Set 'Audit Policy: Policy Change: Audit Policy Change' to 'Success and Failure'

Information

This subcategory reports changes in audit policy including SACL changes.

Solution

Make sure 'Policy Change: Audit Policy Change' is set to success and failure.

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12c., CSCv6|3.5

Plugin: Windows

Control ID: 194efede5c66dd8620f96d84364b838a1b658e8a1b4d112a263056334120345b