800-53|AU-10(2)

Title

VALIDATE BINDING OF INFORMATION PRODUCER IDENTITY

Description

The information system:

Supplemental

This control enhancement prevents the modification of information between production and review. The validation of bindings can be achieved, for example, by the use of cryptographic checksums. Organizations determine if validations are in response to user requests or generated automatically.

Reference Item Details

Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations

Related: AC-16,AC-3,AC-4

Category: AUDIT AND ACCOUNTABILITY

Parent Title: NON-REPUDIATION

Family: AUDIT AND ACCOUNTABILITY

Audit Items

View all Reference Audit Items

Name	Plugin	Audit Name
BIND-9X-001021 - In the event of an error when validating the binding of other DNS servers identity to the BIND 9.x information, when anomalies in the operation of the signed zone transfers are discovered, for the success and failure of start and stop of the name server service or daemon, and for the success and failure of all name server events, a BIND 9.x server implementation must generate a log entry.	Unix	DISA BIND 9.x STIG v2r3
BIND-9X-001200 - A BIND 9.x server implementation must maintain the integrity and confidentiality of DNS information while it is being prepared for transmission, in transmission, and in use and t must perform integrity verification and data origin verification for all DNS information.	Unix	DISA BIND 9.x STIG v2r3
WDNS-AU-000003 - The Windows 2012 DNS Server must, in the event of an error validating another DNS servers identity, send notification to the DNS administrator.	Windows	DISA Microsoft Windows 2012 Server DNS STIG v2r7

Detections

Analytics