EPAS-00-010300 - Audit records must be generated when unsuccessful attempts to access categorized information (e.g., classification levels/security levels) occur.

Information

Changes in categorized information must be tracked. Without an audit trail, unauthorized access to protected data could go undetected.

To aid in diagnosis, it is necessary to keep track of failed attempts in addition to the successful ones.

For detailed information on categorizing information, refer to FIPS Publication 199, Standards for Security Categorization of Federal Information and Information Systems, and FIPS Publication 200, Minimum Security Requirements for Federal Information and Information Systems.

Solution

Execute the following SQL as the 'enterprisedb' operating system user:

> psql edb -c 'ALTER SYSTEM SET edb_audit_statement = 'all''
> psql edb -c 'SELECT pg_reload_conf()'

or

Update the system documentation to note the organizationally approved setting and corresponding justification of the setting for this requirement.

Item Details

Audit Name: EnterpriseDB PostgreSQL Advanced Server DB v2r1

Category: AUDIT AND ACCOUNTABILITY

Plugin: PostgreSQLDB

Control ID: 7b33f38459019883d8c311ee142e8070fc139a246a8b019d767a65ae2249bfb0

Detections

Analytics

EPAS-00-010300 - Audit records must be generated when unsuccessful attempts to access categorized information (e.g., classification levels/security levels) occur.

Information

Solution

See Also

Item Details