DISA_STIG_MSSQL_2012_Database_v1r20.audit from DISA Microsoft SQL Server Instance 2012 v1r20 STIG

SQL2-00-000300 - SQL Server must maintain and support organization-defined security labels on stored information.

800-53|AC-16a.

CAT|II

CCI|CCI-002262

Rule-ID|SV-53912r4_rule

STIG-ID|SQL2-00-000300

Vuln-ID|V-41389

SQL2-00-000400 - SQL Server must maintain and support organization-defined security labels on information in process.

CCI|CCI-002263

Rule-ID|SV-53914r4_rule

STIG-ID|SQL2-00-000400

Vuln-ID|V-41391

SQL2-00-000500 - SQL Server must maintain and support organization-defined security labels on data in transmission.

CCI|CCI-002264

Rule-ID|SV-53916r4_rule

STIG-ID|SQL2-00-000500

Vuln-ID|V-41392

SQL2-00-000900 - SQL Server must allow authorized users to associate security labels to information in the database.

800-53|AC-16(4)

CCI|CCI-002289

Rule-ID|SV-53917r3_rule

STIG-ID|SQL2-00-000900

Vuln-ID|V-41393

SQL2-00-009200 - SQL Server must be protected from unauthorized access by developers.

800-53|AC-5c.

CCI|CCI-002220

Rule-ID|SV-53920r4_rule

STIG-ID|SQL2-00-009200

Vuln-ID|V-41395

SQL2-00-009300 - SQL Server must be protected from unauthorized access by developers on shared production/development host systems.

Rule-ID|SV-53921r2_rule

STIG-ID|SQL2-00-009300

Vuln-ID|V-41396

SQL2-00-009500 - Administrative privileges, built-in server roles and built-in database roles must be assigned to the DBMS login accounts that require them via custom roles, and not directly.

Rule-ID|SV-53922r5_rule

STIG-ID|SQL2-00-009500

Vuln-ID|V-41397

SQL2-00-011050 - SQL Server utilizing Discretionary Access Control (DAC) must enforce a policy that limits propagation of access rights.

800-53|AC-3(4)

CCI|CCI-002165

Rule-ID|SV-53918r3_rule

STIG-ID|SQL2-00-011050

Vuln-ID|V-41394

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 14'

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-53928r4_rule

STIG-ID|SQL2-00-011200

Vuln-ID|V-41402

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 15'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 18'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 20'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 102'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 103'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 104'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 105'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 106'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 107'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 108'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 109'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 110'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 111'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 112'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 113'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 115'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 116'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 117'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 118'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 128'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 129'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 130'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 131'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 132'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 133'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 134'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 135'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 152'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 153'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 170'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 171'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 172'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 173'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 175'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 176'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 177'

SQL2-00-011200 - SQL Server must provide audit record generation capability for organization-defined auditable events within the database - 'Event ID 178'

SQL2-00-014900 - SQL Server must be monitored to discover unauthorized changes to functions.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-53930r4_rule

STIG-ID|SQL2-00-014900

Vuln-ID|V-41403

SQL2-00-015100 - SQL Server must be monitored to discover unauthorized changes to triggers.

Rule-ID|SV-53931r4_rule

STIG-ID|SQL2-00-015100

Vuln-ID|V-41404

SQL2-00-015200 - SQL Server must be monitored to discover unauthorized changes to stored procedures.

Rule-ID|SV-53933r4_rule

STIG-ID|SQL2-00-015200

Vuln-ID|V-41406

SQL2-00-015600 - Database objects must be owned by accounts authorized for ownership.

Rule-ID|SV-53935r2_rule

STIG-ID|SQL2-00-015600

Vuln-ID|V-41407

SQL2-00-015610 - In a database owned by [sa], or by any other login having administrative privileges at the instance level, the database property TRUSTWORTHY must be OFF.

Rule-ID|SV-75233r1_rule

STIG-ID|SQL2-00-015610

Vuln-ID|V-60781

SQL2-00-015620 - In a database owned by a login not having administrative privileges at the instance level, the database property TRUSTWORTHY must be OFF unless required and authorized.

Rule-ID|SV-75113r1_rule

STIG-ID|SQL2-00-015620

Vuln-ID|V-60671

SQL2-00-016900 - Unused database components and database objects must be removed.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-53937r3_rule

STIG-ID|SQL2-00-016900

Vuln-ID|V-41409

SQL2-00-017510 - Appropriate staff must be alerted when the amount of storage space used by the SQL Server transaction log file(s) exceeds an organization-defined value - s exceeds an organization-defined value.

800-53|CP-10(2)

CAT|III

CCI|CCI-000553

Rule-ID|SV-85249r2_rule

STIG-ID|SQL2-00-017510

Vuln-ID|V-70627

SQL2-00-019300 - SQL Server must encrypt information stored in the database.

Rule-ID|SV-53939r5_rule

STIG-ID|SQL2-00-019300

Vuln-ID|V-41411

SQL2-00-019500 - SQL Server must implement required cryptographic protections using cryptographic modules complying with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.

800-53|SC-13

CCI|CCI-002450

Rule-ID|SV-53940r5_rule

STIG-ID|SQL2-00-019500

Vuln-ID|V-41412

SQL2-00-021300 - SQL Server must protect data at rest and ensure confidentiality and integrity of data.

800-53|SC-28

CCI|CCI-001199

Rule-ID|SV-53265r5_rule

STIG-ID|SQL2-00-021300

Vuln-ID|V-40911

SQL2-00-021400 - SQL Server must employ cryptographic mechanisms preventing the unauthorized disclosure of information at rest.

800-53|SC-28(1)

CCI|CCI-002476

Rule-ID|SV-53949r6_rule

STIG-ID|SQL2-00-021400

Vuln-ID|V-41420

SQL2-00-021800 - SQL Server must prevent unauthorized and unintended information transfer via shared system resources.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-53950r2_rule

STIG-ID|SQL2-00-021800

Vuln-ID|V-41421

SQL2-00-022000 - SQL Server must protect against or limit the effects of the organization-defined types of Denial of Service (DoS) attacks.

800-53|SC-5

CCI|CCI-002385

Rule-ID|SV-53951r2_rule

STIG-ID|SQL2-00-022000

Vuln-ID|V-41422

SQL2-00-022500 - SQL Server must check the validity of data inputs.

800-53|SI-10

CCI|CCI-001310

Rule-ID|SV-53953r3_rule

STIG-ID|SQL2-00-022500

Vuln-ID|V-41424

SQL2-00-023500 - SQL Server job/batch queues must be reviewed regularly to detect unauthorized SQL Server job submissions.

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-53925r2_rule

STIG-ID|SQL2-00-023500

Vuln-ID|V-41399

SQL2-00-024100 - The Database Master Key must be encrypted by the Service Master Key where required.

Rule-ID|SV-53944r3_rule

STIG-ID|SQL2-00-024100

Vuln-ID|V-41415

SQL2-00-024200 - Database Master Key passwords must not be stored in credentials within the database.

Rule-ID|SV-53945r2_rule

STIG-ID|SQL2-00-024200

Vuln-ID|V-41416

SQL2-00-024300 - Symmetric keys (other than the database master key) must use a DoD certificate to encrypt the key.

Detections

Analytics

DISA STIG SQL Server 2012 Database Audit v1r20

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous