← Back to VMware vRealize Automation 7.x vAMI Security Technical Implementation Guide

V-240933

CAT II (Medium)

The vAMI log records must be backed up at least every seven days onto a different system or system component than the system or component being logged.

Rule ID

SV-240933r879582_rule

STIG

VMware vRealize Automation 7.x vAMI Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-001348

Discussion

Protection of log data includes assuring log data is not accidentally lost or deleted. Backing up log records to a different system or onto separate media from the system that the vAMI is actually running on helps to assure that in the event of a catastrophic system failure, the log records will be retained.

Check Content

Interview the ISSO and/or the SA. 

Determine if there is a local procedure to back up log records at least every seven days onto a different system. 

If a procedure does not exist or is not being followed, this is a finding.

Fix Text

Develop and implement a site procedure to back up the log data and records to a different system or separate media at least every seven days.