SQL6-D0-013200 - SQL Server must generate audit records when successful and unsuccessful attempts to access categorized information (e.g., classification levels/security levels) occur.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

Information

Changes in categorized information must be tracked. Without an audit trail, unauthorized access to protected data could go undetected.

For detailed information on categorizing information, refer to FIPS Publication 199, Standards for Security Categorization of Federal Information and Information Systems, and FIPS Publication 200, Minimum Security Requirements for Federal Information and Information Systems.

To aid in diagnosis, it is necessary to keep track of failed attempts in addition to the successful ones.

Satisfies: SRG-APP-000494-DB-000344

Solution

Deploy an audit to audit when data classifications are both successfully and unsuccessfully retrieved. See the supplemental file 'SQL 2016 Audit.sql'.

Item Details

Audit Name: DISA MS SQL Server 2016 Instance STIG v3r5 MS_SQLDB

Plugin: MS_SQLDB

Control ID: f030ae47b2d95f6047812884fe6aedf1a22c88d5fc18bc23824a2afc4b617749

Detections

Analytics

SQL6-D0-013200 - SQL Server must generate audit records when successful and unsuccessful attempts to access categorized information (e.g., classification levels/security levels) occur.

Warning! Audit Deprecated

Information

Solution

See Also

Item Details