CCI|CCI-001405

Title

The information system automatically audits account removal actions.

Reference Item Details

Category: 2009

Audit Items

View all Reference Audit Items

NamePluginAudit Name
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/groupUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/audit/configUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/environUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/groupUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/limitsUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/login.cfgUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/passwd readUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/passwd writeUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/userUnixDISA STIG AIX 7.x v2r6
AMLS-NM-000150 - The Arista Multilayer Switch must automatically audit account removal actions.AristaDISA STIG Arista MLS DCS-7000 Series NDM v1r3
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
CASA-ND-000120 - The Cisco ASA must be configured to automatically audit account removal actions - Buffer EnabledCiscoDISA STIG Cisco ASA NDM v1r1
CASA-ND-000120 - The Cisco ASA must be configured to automatically audit account removal actions - logging enabledCiscoDISA STIG Cisco ASA NDM v1r1
Catalina - Configure System to Audit All Administrative Action EventsUnixNIST macOS Catalina v1.5.0 - 800-53r4 High
Catalina - Configure System to Audit All Administrative Action EventsUnixNIST macOS Catalina v1.5.0 - All Profiles
Catalina - Configure System to Audit All Administrative Action EventsUnixNIST macOS Catalina v1.5.0 - 800-171
Catalina - Configure System to Audit All Administrative Action EventsUnixNIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Configure System to Audit All Administrative Action EventsUnixNIST macOS Catalina v1.5.0 - 800-53r5 Moderate
Catalina - Configure System to Audit All Administrative Action EventsUnixNIST macOS Catalina v1.5.0 - CNSSI 1253
Catalina - Configure System to Audit All Administrative Action EventsUnixNIST macOS Catalina v1.5.0 - 800-53r4 Low
Catalina - Configure System to Audit All Administrative Action EventsUnixNIST macOS Catalina v1.5.0 - 800-53r5 High
Catalina - Configure System to Audit All Administrative Action EventsUnixNIST macOS Catalina v1.5.0 - 800-53r5 Low
CISC-ND-000120 - The Cisco router must be configured to automatically audit account removal actions.CiscoDISA STIG Cisco IOS XE Router NDM v2r5
CISC-ND-000120 - The Cisco router must be configured to automatically audit account removal actions.CiscoDISA STIG Cisco IOS Router NDM v2r4
CISC-ND-000120 - The Cisco switch must be configured to automatically audit account removal actions - aaa accounting default groupCiscoDISA STIG Cisco NX-OS Switch NDM v2r3
CISC-ND-000120 - The Cisco switch must be configured to automatically audit account removal actions - serversCiscoDISA STIG Cisco NX-OS Switch NDM v2r3
CISC-ND-000120 - The Cisco switch must be configured to automatically audit account removal actions.CiscoDISA STIG Cisco IOS XE Switch NDM v2r3
CISC-ND-000120 - The Cisco switch must be configured to automatically audit account removal actions.CiscoDISA STIG Cisco IOS Switch NDM v2r4
F5BI-DM-000025 - The BIG-IP appliance must automatically audit account removal actions.F5DISA F5 BIG-IP Device Management 11.x STIG v2r1
FGFW-ND-000020 - The FortiGate device must automatically audit account removal actions. - eventFortiGateDISA Fortigate Firewall NDM STIG v1r1
FGFW-ND-000020 - The FortiGate device must automatically audit account removal actions. - systemFortiGateDISA Fortigate Firewall NDM STIG v1r1
GEN002753 - The audit system must be configured to audit account termination - '/etc/security/audit/config USER_Remove exists'UnixDISA STIG AIX 6.1 v1r14
GEN002753 - The audit system must be configured to audit account termination - '/etc/security/audit/config USER_Remove exists'UnixDISA STIG AIX 5.3 v1r2
GEN002753 - The audit system must be configured to audit account termination - '/etc/security/audit/events USER_Remove exists'UnixDISA STIG AIX 6.1 v1r14
GEN002753 - The audit system must be configured to audit account termination - '/etc/security/audit/events USER_Remove exists'UnixDISA STIG AIX 5.3 v1r2
GEN002753 - The audit system must be configured to audit account termination - 'groupdel'UnixDISA STIG for Oracle Linux 5 v2r1
GEN002753 - The audit system must be configured to audit account termination - 'groupdel'UnixDISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN002753 - The audit system must be configured to audit account termination - 'User audit class assignments should be reviewed'UnixDISA STIG AIX 6.1 v1r14
GEN002753 - The audit system must be configured to audit account termination - 'User audit class assignments should be reviewed'UnixDISA STIG AIX 5.3 v1r2
GEN002753 - The audit system must be configured to audit account termination - 'userdel'UnixDISA STIG for Oracle Linux 5 v2r1
GEN002753 - The audit system must be configured to audit account termination - 'userdel'UnixDISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN002753 - The audit system must be configured to audit account termination - flags +ua and -uaUnixDISA STIG Solaris 10 SPARC v2r2