Detections
Analytics

1.6 Host integrated hardware management controller must enable time synchronization

Information

Cryptography, audit logging, cluster operations, and incident response/forensics depend deeply on synchronized time. This recommendation extends to all devices in infrastructure. The recommendation for NTP is to have at least four sources.

Ensuring the host integrated hardware management controller enables time synchronization provides a consistent and accurate timestamp for logs and events, which is crucial for auditing, troubleshooting, and identifying security incidents.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

- Enable NTP or the vendor-supported automatic time synchronization service.
 - Enter the organization's approved NTP servers.
 - Configure multiple authoritative NTP sources where supported.
 - Configure the appropriate time zone.
 - Save/apply the configuration.

Impact:

No impact noted.

See Also

https://workbench.cisecurity.org/benchmarks/28124

Item Details

Category: CONFIGURATION MANAGEMENT, MAINTENANCE

References: 800-53|CM-7, 800-53|MA-4, CSCv7|5.4

Plugin: Unix

Control ID: d7b0d1d14d70a3e5ab53e705e4f9e88c2ad0369f48adfa5edadae64a8c571865