Rule ID
SV-263587r982455_rule
Version
V2R4
CCIs
CCI-003821
Automated mechanisms for centralized reviews and analyses include Security Information and Event Management products.
Verify the container platform is configured to implement the capability to centrally review and analyze audit records from multiple components within the system. If the container platform is not configured to implement the capability to centrally review and analyze audit records from multiple components within the system, this is a finding.
Configure the container platform to implement the capability to centrally review and analyze audit records from multiple components within the system.