Rule ID
SV-207454r971542_rule
Version
V2R3
CCIs
If security personnel are not notified immediately when storage volume reaches 75%, they are unable to plan for audit record storage capacity expansion.
Verify the VMM provides an immediate warning to the SA and ISSO, at a minimum, when allocated audit record storage volume reaches 75% of repository maximum audit record storage capacity. If it does not, this is a finding.
Configure the VMM to provide an immediate warning to the SA and ISSO, at a minimum, when allocated audit record storage volume reaches 75% of repository maximum audit record storage capacity.