Detections
Analytics

800-53|CM-3e.

Title

CONFIGURATION CHANGE CONTROL

Description

Retains records of configuration-controlled changes to the information system for [Assignment: organization-defined time period];

Reference Item Details

Category: CONFIGURATION MANAGEMENT

Family: CONFIGURATION MANAGEMENT

Baseline Impact: MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.4.4 Ensure boot loader does not allow removable mediaUnixCIS Amazon Linux 2 STIG v2.0.1 STIG
1.6.1.10 Ensure system device files are labeled.UnixCIS Amazon Linux 2 STIG v2.0.1 STIG
2.2.21 Ensure the TFTP server has not been installedUnixCIS Amazon Linux 2 STIG v2.0.1 STIG
4.2.1.6 Ensure remote rsyslog messages are only accepted on designated log hosts.UnixCIS Amazon Linux 2 STIG v2.0.1 L1 Server
4.2.1.6 Ensure remote rsyslog messages are only accepted on designated log hosts.UnixCIS Amazon Linux 2 STIG v2.0.1 STIG
5.3.30 Ensure SSH does not permit GSSAPIUnixCIS Amazon Linux 2 STIG v2.0.1 STIG
5.3.31 Ensure SSH does not permit Kerberos authenticationUnixCIS Amazon Linux 2 STIG v2.0.1 STIG
5.5.9 Ensure local interactive user accounts umask is 077UnixCIS Amazon Linux 2 STIG v2.0.1 STIG
FireEye - Configuration auditing logs the required number of changesFireEyeTNS FireEye