EX13-MB-000290 - An Exchange software baseline copy must exist.

Information

Exchange software, as with other application software installed on a host system, must be included in a system baseline record and periodically reviewed; otherwise, unauthorized changes to the software may not be discovered. This effort is a vital step to securing the host and the applications, as it is the only method that may provide the ability to detect and recover from otherwise undetected changes, such as those that result from worm or bot intrusions.

The Exchange software and configuration baseline is created and maintained for comparison during scanning efforts. Operational procedures must include baseline updates as part of configuration management tasks that change the software and configuration.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Implement an email software baseline process and update the EDSP.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Exchange_2013_Y21M12_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-5(1), CAT|II, CCI|CCI-001813, Rule-ID|SV-207324r615936_rule, STIG-ID|EX13-MB-000290, STIG-Legacy|SV-84691, STIG-Legacy|V-70069, Vuln-ID|V-207324

Plugin: Windows

Control ID: cfec255f81daadbb8e4a8768331d864e478b5e506906aec69b609ed9e3249d5d