Details

Ensures that basic audit features are used. Recommend setting audit_trail to OS as it reduces the likelihood of a Denial of Service attack

and it is easier to secure the audit trail. OS is required if the auditor is distinct from the DBA. Any auditing information stored in the

database is viewable and modifiable by the DBA if set to DB or DB_EXTENDED.

Level 1, Scorable

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/580

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Windows.

References

• 800-53|AU-12c.

Source

• Tenable.com/audits