← Back to Virtual Machine Manager Security Requirements Guide

V-207494

CAT II (Medium)

The VMM must implement cryptographic mechanisms to prevent unauthorized modification of all information at rest on all VMM components.

Rule ID

SV-207494r958870_rule

STIG

Virtual Machine Manager Security Requirements Guide

Version

V2R3

CCIs

CCI-002475

Discussion

VMMs handling data requiring "data at rest" protections must employ cryptographic mechanisms to prevent unauthorized modification of the information at rest. Selection of a cryptographic mechanism is based on the need to protect the integrity of organizational information. The strength of the mechanism is commensurate with the security category and/or classification of the information.

Check Content

Verify the VMM implements cryptographic mechanisms to prevent unauthorized modification of all information at rest on all VMM components.

If it does not, this is a finding.

Fix Text

Configure the VMM to implement cryptographic mechanisms to prevent unauthorized modification of all information at rest on all VMM components.