Windows 10 STIG V1R5 WN10-AU-000520 V-63537 CCI-000162, Windows 10 STIG V1R5 WN10-AU-000525 V-63541 CCI-000162, Windows 10 STIG V1R5 WN10-UR-000130 V-63927 CCI-000162, Windows Server 2008 R2 Domain Controller STIG V1R21 Manage auditing and security log CCI-000162, Windows Server 2008 R2 Member Server STIG V1R22 Manage auditing and security log V-26496 CCI-000162, Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5 Manage auditing and security log V-26496 CCI-000162, Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5 WINAU-000204 V-36722 CCI-000162, Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5 V-36723 CCI-000162, Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5 WINAU-000206 V-36724 CCI-000162, Windows Server 2012 / 2012 R2 Domain Controller STIG V2R5 Manage auditing and security log V-26496 CCI-000162, Windows Server 2012 / 2012 R2 Member Server STIG V2R5 Manage auditing and security log CCI-000162, Windows Server 2012 / 2012 R2 Member Server STIG V2R5 V-36722 CCI-000162, Windows Server 2012 / 2012 R2 Member Server STIG V2R5 V-36723 CCI-000162, Windows Server 2012 / 2012 R2 Member Server STIG V2R5 WINAU-000206 CCI-000162, Windows Server 2012 / 2012 R2 Member Server STIG V2R5 Manage auditing and security log CCI-000162,
as the local organization deems appropriate. AU-1 AU-1 (a) (1) High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the and accountability policy to ensure that the audit and accountability policy addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance. AU-1 AU-1 (a) (1) High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the audit and accountability procedures via the inspected organization's information sharing capability (e.g. portal, intranet, email, etc.) to ensure it has been disseminated. AU-1 AU-1 (a) (2) High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the audit and accountability procedures to ensure that the procedures facilitate the implementation of the audit and accountability policy and associated audit and accountability controls. AU-1 AU-1 (a) (2) High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the audit and accountability procedures via the inspected organization's information sharing capability (e.g. portal, intranet, email, etc.) to ensure it has been disseminated. AU-1 AU-1 (b) (1) High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the
DoDI 8520.02 and DoDI 8520.03 meet the DoD requirement to define the actions to be covered by non-repudiation. For information system components that have applicable STIGs or SRGs, the organization conducting the inspection/assessment evaluates the components to ensure that the organization being inspected/assessed has configured the information system in compliance with the applicable STIGs and SRGs pertaining to CCI 166. AU-10 AU-10 High Moderate The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the actions to be covered by non-repudiation as actions defined by DoDI 8520.02 and DoDI 8520.03. Automatically compliant with this CCI because they are covered at the DoD level AU-10 (1) AU-10 (1) (a) blank blank blank The organization conducting the inspection/assessment obtains and examines the documented strength of binding to ensure the organization being inspected/assessed defines the strength of binding and where within the information system it has been implemented, to be applied to the binding of the identity of the information producer with the information. DoD has determined that the strength of binding is not appropriate to define at the Enterprise level. NIST has not allocated this AP. Therefore, this AP is not applicable. AU-10 (1) AU-10 (1) (a) blank blank blank The organization conducting the NIST has not allocated this
inspection/assessment examines the information system to ensure the producer identity is bound to the information with the strength of binding defined in AU-10 (1) CCI 1900. For information system components that have applicable STIGs or SRGs, the organization conducting the inspection/assessment evaluates the components to ensure that the organization being inspected/assessed has configured the information system in compliance with the applicable STIGs and SRGs pertaining to CCI 1901. AP. Therefore, this AP is not applicable. AU-10 (1) AU-10 (1) (b) blank The organization conducting the inspection/assessment examines the information system to ensure authorized individuals are able to determine the identity of the producer of the information. For information system components that have applicable STIGs or SRGs, the organization conducting the inspection/assessment evaluates the components to ensure that the organization being inspected/assessed has configured the information system in compliance with the applicable STIGs and SRGs pertaining to CCI 1902. NIST has not allocated this AP. Therefore, this AP is not applicable. AU-10 (2) AU-10 (2) (a) blank blank blank The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the Automatically compliant with this CCI because they are covered at the DoD
inspected/assessed configures the information system to implement an alternative audit capability in the event of a failure in primary audit capability that provides the alternative audit functionality defined in AU-15, CCI 1921. For information system components that have applicable STIGs or SRGs, the organization conducting the inspection/assessment evaluates the components to ensure that the organization being inspected/assessed has configured the information system in compliance with the applicable STIGs and SRGs pertaining to CCI 1922. AU-16 AU-16 blank The organization conducting the inspection/assessment obtains and examines the documented audit information to ensure the organization being inspected/assessed defines the audit information to be coordinated among external organizations when audit information is transmitted across organizational boundaries. DoD has determined the methods are not appropriate to define at the Enterprise level. NIST has not allocated this AP. Therefore, this AP is not applicable. AU-16 AU-16 blank blank The organization conducting the inspection/assessment obtains and examines the documented methods to ensure the organization being inspected/assessed defines the methods to be employed when coordinating audit information among NIST has not allocated this AP. Therefore, this AP is not applicable.
AU-2 (3) AU-2 (3) High Moderate Low High Moderate Low The organization inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as annually or more frequently upon changes to situational awareness of threats or vulnerabilities. Automatically compliant with this CCI because they are covered at the DoD level AU-2 (4) AU-2 (4) blank blank blank The organization conducting the inspection/assessment reviews the organization's audit and accountability policy; procedures addressing auditable events; list of organization defined auditable events; list of privileged security functions; other relevant documents or records. The objective is to validate the organization has included the execution of privileged functions in the list of events to be audited by the information system. NIST has not allocated this AP. Therefore, this AP is not applicable. AU-2 AU-2 (a) High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the documentation of the auditable events to ensure the information system is capable of auditing the: - successful and unsuccessful attempts to access, modify, or delete privileges, security objects, security levels, or categories of information (e.g. Classification levels), - Successful and unsuccessful logon attempts, - Privileged activities or other system level access, - Starting and ending time for user access to the system, - Concurrent logons from different workstations,