800-53|AU-8

Title

TIME STAMPS

Description

The information system:

Supplemental

Time stamps generated by the information system include date and time. Time is commonly expressed in Coordinated Universal Time (UTC), a modern continuation of Greenwich Mean Time (GMT), or local time with an offset from UTC. Granularity of time measurements refers to the degree of synchronization between information system clocks and reference clocks, for example, clocks synchronizing within hundreds of milliseconds or within tens of milliseconds. Organizations may define different time granularities for different system components. Time service can also be critical to other security capabilities such as access control and identification and authentication, depending on the nature of the mechanisms used to support those capabilities.

Reference Item Details

Related: AU-12,AU-3

Category: AUDIT AND ACCOUNTABILITY

Family: AUDIT AND ACCOUNTABILITY

Priority: P1

Baseline Impact: LOW,MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.1.1.1.4 Configure 'Maximum tolerance for computer clock synchronization'WindowsCIS Windows 2003 DC v3.1.0
1.1.11 Maximum tolerance for computer clock synchronizationWindowsCIS Windows 2008 SSLF v1.2.0
1.1.11 Maximum tolerance for computer clock synchronization - Domain ControllerWindowsCIS Windows 2008 Enterprise v1.2.0
1.3.5 Ensure 'Maximum tolerance for computer clock synchronization' is set to '5 or fewer minutes' (STIG DC only)WindowsCIS Microsoft Windows Server 2022 STIG v1.0.0 STIG DC
1.3.5 Ensure 'Maximum tolerance for computer clock synchronization' is set to '5 or fewer minutes' (STIG DC only)WindowsCIS Microsoft Windows Server 2019 STIG v2.0.0 STIG DC
1.3.5 Ensure 'Maximum tolerance for computer clock synchronization' is set to '5 or fewer minutes' (STIG DC only)WindowsCIS Microsoft Windows Server 2016 STIG v2.0.0 STIG DC
1.3.10 Ensure 'Password Profiles' do not existPalo_AltoCIS Palo Alto Firewall 10 v1.1.0 L1
1.4 Ensure 'Allow queries to a Google time service' is set to 'Enabled'WindowsCIS Google Chrome L1 v3.0.0
1.4.5.1 Enter correct time settings 'process'UnixCIS Apple OSX 10.6 Snow Leopard L1 v1.0.0
1.4.5.1 Enter correct time settings 'server 1'UnixCIS Apple OSX 10.6 Snow Leopard L1 v1.0.0
1.4.5.1 Enter correct time settings 'server 2'UnixCIS Apple OSX 10.6 Snow Leopard L1 v1.0.0
1.6 Ensure clocks are synchronized on all nodesUnixCIS Apache Cassandra 3.11 L1 Unix Audit v1.0.0
1.6 Ensure clocks are synchronized on all nodesUnixCIS Apache Cassandra 3.11 L2 Unix Audit v1.0.0
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 11 v1.0.0 L1
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 8 Benchmark L1 v1.0.0
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 9 v1.1.0 L1
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 10 v1.1.0 L1
1.6.4 Configure Logging TimestampsCiscoCIS Cisco NX-OS L1 v1.1.0
1.7.1 Configure at least 2 external NTP ServersCiscoCIS Cisco NX-OS L1 v1.1.0
1.7.2 Configure a Time ZoneCiscoCIS Cisco NX-OS L1 v1.1.0
1.7.3 If a Local Time Zone is used, Configure Daylight SavingsCiscoCIS Cisco NX-OS L1 v1.1.0
1.7.4 Configure NTP AuthenticationCiscoCIS Cisco NX-OS L2 v1.1.0
1.9.1.1 Ensure 'NTP authentication' is enabledCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.9.1.1 Ensure 'NTP authentication' is enabledCiscoCIS Cisco Firewall ASA 9 L1 v4.1.0
1.9.1.2 Ensure 'NTP authentication key' is configured correctlyCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.9.1.3 Ensure 'trusted NTP server' existsCiscoCIS Cisco Firewall v8.x L1 v4.2.0
1.9.1.3 Ensure 'trusted NTP server' existsCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.9.1.3 Ensure 'trusted NTP server' existsCiscoCIS Cisco Firewall ASA 8 L1 v4.1.0
1.9.1.3 Ensure 'trusted NTP server' existsCiscoCIS Cisco Firewall ASA 9 L1 v4.0.0
1.9.2 Ensure 'local timezone' is properly configuredCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.10.7 Ensure 'logging with timestamps' is enabledCiscoCIS Cisco Firewall ASA 9 L1 v4.0.0
1.10.7 Ensure 'logging with timestamps' is enabledCiscoCIS Cisco Firewall ASA 8 L1 v4.1.0
1.40 Ensure 'Allow queries to a Browser Network Time service' is set to 'Enabled'WindowsCIS Microsoft Edge L1 v2.0.0
13 - Network Time ProtocolNetapp_APINetApp Security Hardening Guide for ONTAP 9 v1.7.0
18.8.52.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L2
18.8.52.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L2 Bitlocker
18.8.53.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 Member Server Level 2 v3.3.1
18.8.53.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 R2 Domain Controller Level 2 v3.3.1
18.8.53.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 2 v3.3.1
18.8.53.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 Domain Controller Level 2 v3.3.1
18.8.53.1.2 (L2) Ensure 'Enable Windows NTP Server' is set to 'Disabled' (MS only)WindowsCIS Microsoft Windows Server 2008 Member Server Level 2 v3.3.1
18.8.53.1.2 (L2) Ensure 'Enable Windows NTP Server' is set to 'Disabled' (MS only)WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 2 v3.3.1
18.9.50.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG v2.0.0 L2 MS
18.9.50.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Windows Server 2012 R2 MS L2 v3.0.0
18.9.50.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG v2.0.0 L2 DC
18.9.50.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG v2.0.0 L2 MS
18.9.50.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Windows Server 2012 R2 DC L2 v3.0.0
18.9.50.1.1 (L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG v2.0.0 L2 DC