800-53|AU-8

Title

TIME STAMPS

Description

The information system:

Supplemental

Time stamps generated by the information system include date and time. Time is commonly expressed in Coordinated Universal Time (UTC), a modern continuation of Greenwich Mean Time (GMT), or local time with an offset from UTC. Granularity of time measurements refers to the degree of synchronization between information system clocks and reference clocks, for example, clocks synchronizing within hundreds of milliseconds or within tens of milliseconds. Organizations may define different time granularities for different system components. Time service can also be critical to other security capabilities such as access control and identification and authentication, depending on the nature of the mechanisms used to support those capabilities.

Reference Item Details

Related: AU-12,AU-3

Category: AUDIT AND ACCOUNTABILITY

Family: AUDIT AND ACCOUNTABILITY

Priority: P1

Baseline Impact: LOW,MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.4 (L1) Ensure 'Allow queries to a Google time service' is set to 'Enabled'WindowsCIS Google Chrome L1 v3.0.0
1.5.4 Configure Logging TimestampsCiscoCIS Cisco NX-OS v1.2.0 L1
1.6 Ensure clocks are synchronized on all nodesUnixCIS Apache Cassandra 3.11 L1 Unix Audit v1.0.0
1.6 Ensure clocks are synchronized on all nodesUnixCIS Apache Cassandra 3.11 L2 Unix Audit v1.0.0
1.6.1 Configure at least 2 external NTP ServersCiscoCIS Cisco NX-OS v1.2.0 L1
1.6.2 Configure a Time ZoneCiscoCIS Cisco NX-OS v1.2.0 L1
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 11 v1.1.0 L1
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 8 Benchmark L1 v1.0.0
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 9 v1.1.0 L1
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 10 v1.2.0 L1
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.6.3 If a Local Time Zone is used, Configure Daylight SavingsCiscoCIS Cisco NX-OS v1.2.0 L1
1.6.4 Configure NTP AuthenticationCiscoCIS Cisco NX-OS v1.2.0 L2
1.9.1.1 Ensure 'NTP authentication' is enabledCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.9.1.1 Ensure 'NTP authentication' is enabledCiscoCIS Cisco Firewall ASA 9 L1 v4.1.0
1.9.1.2 Ensure 'NTP authentication key' is configured correctlyCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.9.1.3 Ensure 'trusted NTP server' existsCiscoCIS Cisco Firewall v8.x L1 v4.2.0
1.9.1.3 Ensure 'trusted NTP server' existsCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.9.2 Ensure 'local timezone' is properly configuredCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.44 (L1) Ensure 'Allow queries to a Browser Network Time service' is set to 'Enabled'WindowsCIS Microsoft Edge v3.0.0 L1
1.44 WN16-00-000450WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT III
1.44 WN16-00-000450WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT III
1.44 WN19-00-000440WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT III
1.44 WN19-00-000440WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT III
1.44 WN22-00-000440WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT III
1.44 WN22-00-000440WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT III
1.51 UBTU-22-252010UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT III
1.52 UBTU-22-252015UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT III
1.108 UBTU-24-600160UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT III
1.109 UBTU-24-600180UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT III
1.151 WN16-DC-000060WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT II
1.152 WN19-DC-000060WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II
1.152 WN22-DC-000060WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II
1.169 RHEL-09-252010UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.170 RHEL-09-252015UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.171 RHEL-09-252020UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.284 OL08-00-030740UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.367 RHEL-09-653010UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
13 - Network Time ProtocolNetapp_APINetApp Security Hardening Guide for ONTAP 9 v1.7.0
18.8.52.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L2
18.8.52.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L2 Bitlocker
18.8.53.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 Member Server Level 2 v3.3.1
18.8.53.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 R2 Domain Controller Level 2 v3.3.1
18.8.53.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 2 v3.3.1
18.8.53.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 Domain Controller Level 2 v3.3.1
18.8.53.1.2 (L2) Ensure 'Enable Windows NTP Server' is set to 'Disabled' (MS only)WindowsCIS Microsoft Windows Server 2008 Member Server Level 2 v3.3.1
18.8.53.1.2 (L2) Ensure 'Enable Windows NTP Server' is set to 'Disabled' (MS only)WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 2 v3.3.1
18.9.50.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Windows Server 2012 R2 MS L2 v3.0.0
18.9.50.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Windows Server 2012 R2 DC L2 v3.0.0