SQL4-00-002000 - SQL Server must enforce approved authorizations for logical access to information and database-level system resources in accordance with applicable access control policies.

800-53|AC-3

CAT|II

CCI|CCI-000213

Rule-ID|SV-213764r960792_rule

STIG-ID|SQL4-00-002000

STIG-Legacy|SV-81847

STIG-Legacy|V-67357

Vuln-ID|V-213764

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - APPLICATION_ROLE_CHANGE_PASSWORD_GROUP

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-213765r960879_rule

STIG-ID|SQL4-00-011200

STIG-Legacy|SV-81849

STIG-Legacy|V-67359

Vuln-ID|V-213765

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - AUDIT_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - BACKUP_RESTORE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - DATABASE_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - DATABASE_OBJECT_ACCESS_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - DATABASE_OBJECT_PERMISSION_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - DATABASE_OPERATION_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - DATABASE_OWNERSHIP_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - DATABASE_PERMISSION_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - DATABASE_PRINCIPAL_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - DATABASE_PRINCIPAL_IMPERSONATION_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - DATABASE_ROLE_MEMBER_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - DBCC_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 14

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 15

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 16

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 17

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 18

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 20

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 42

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 43

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 46

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 47

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 90

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 102

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 103

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 104

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 105

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 106

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 107

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 108

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 109

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 110

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 111

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 112

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 113

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 115

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 116

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 117

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 118

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 128

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 129

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 130

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 131

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 132

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 133

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 134

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 135

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 152

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 153

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 162

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 164

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 170

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 171

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 172

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 173

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 175

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 176

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 177

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 178

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - Event ID 180

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - FAILED_LOGIN_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - LOGIN_CHANGE_PASSWORD_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - LOGOUT_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SCHEMA_OBJECT_ACCESS_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SCHEMA_OBJECT_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SERVER_OBJECT_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SERVER_OBJECT_OWNERSHIP_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SERVER_OBJECT_PERMISSION_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SERVER_OPERATION_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SERVER_PERMISSION_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SERVER_PRINCIPAL_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SERVER_PRINCIPAL_IMPERSONATION_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SERVER_ROLE_MEMBER_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SERVER_STATE_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - SUCCESSFUL_LOGIN_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events - TRACE_CHANGE_GROUP

SQL4-00-011200 - SQL Server must generate Trace or Audit records for organization-defined auditable events.

SQL4-00-011320 - Where SQL Server Audit is in use at the database level, SQL Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited at the database level.

800-53|AU-12b.

CCI|CCI-000171

Rule-ID|SV-213766r960882_rule

STIG-ID|SQL4-00-011320

STIG-Legacy|SV-81851

STIG-Legacy|V-67361

Vuln-ID|V-213766

SQL4-00-014900 - SQL Server must be monitored to discover unauthorized changes to functions.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-213767r960960_rule

STIG-ID|SQL4-00-014900

STIG-Legacy|SV-81855

STIG-Legacy|V-67365

Vuln-ID|V-213767

SQL4-00-015100 - SQL Server must be monitored to discover unauthorized changes to triggers.

Rule-ID|SV-213768r960960_rule

STIG-ID|SQL4-00-015100

STIG-Legacy|SV-81857

STIG-Legacy|V-67367

Vuln-ID|V-213768

SQL4-00-015200 - SQL Server must be monitored to discover unauthorized changes to stored procedures.

Rule-ID|SV-213769r960960_rule

STIG-ID|SQL4-00-015200

STIG-Legacy|SV-81859

STIG-Legacy|V-67369

Vuln-ID|V-213769

SQL4-00-015600 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to SQL Server, etc.) must be owned by database/DBMS principals authorized for ownership.

Rule-ID|SV-213770r960960_rule

STIG-ID|SQL4-00-015600

STIG-Legacy|SV-81861

STIG-Legacy|V-67371

Vuln-ID|V-213770

SQL4-00-015610 - In a database owned by [sa], or by any other login having administrative privileges at the instance level, the database property TRUSTWORTHY must be OFF.

Rule-ID|SV-213771r960960_rule

STIG-ID|SQL4-00-015610

STIG-Legacy|SV-81865

STIG-Legacy|V-67375

Vuln-ID|V-213771

SQL4-00-015620 - In a database owned by a login not having administrative privileges at the instance level, the database property TRUSTWORTHY must be OFF unless required and authorized.

Rule-ID|SV-213772r960960_rule

STIG-ID|SQL4-00-015620

STIG-Legacy|SV-81863

STIG-Legacy|V-67373

Vuln-ID|V-213772

SQL4-00-021210 - In the event of a system failure, SQL Server must preserve any information necessary to return to operations with least disruption to mission processes.

800-53|SC-24

CCI|CCI-001665

Rule-ID|SV-213773r961125_rule

STIG-ID|SQL4-00-021210

STIG-Legacy|SV-81867

STIG-Legacy|V-67377

Vuln-ID|V-213773

SQL4-00-021300 - SQL Server must protect data at rest and ensure confidentiality and integrity of data.

800-53|SC-28

CCI|CCI-001199

Rule-ID|SV-213774r961128_rule

STIG-ID|SQL4-00-021300

STIG-Legacy|SV-82367

STIG-Legacy|V-67877

Vuln-ID|V-213774

SQL4-00-021800 - Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data-transfer policy.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-213775r961149_rule

STIG-ID|SQL4-00-021800

STIG-Legacy|SV-81879

STIG-Legacy|V-67389

Vuln-ID|V-213775

SQL4-00-022500 - SQL Server must check the validity of all data inputs except those specifically identified by the organization.

800-53|SI-10

CCI|CCI-001310

Rule-ID|SV-213776r961158_rule

STIG-ID|SQL4-00-022500

STIG-Legacy|SV-81881

STIG-Legacy|V-67391

Vuln-ID|V-213776

SQL4-00-022800 - The DBMS and associated applications must provide non-privileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

800-53|SI-11a.

CCI|CCI-001312

Rule-ID|SV-213777r961167_rule

STIG-ID|SQL4-00-022800

STIG-Legacy|SV-81887

STIG-Legacy|V-67397

Vuln-ID|V-213777

SQL4-00-022900 - SQL Server must reveal detailed error messages only to the ISSO, ISSM (or their designees), SA and DBA.

800-53|SI-11b.

CCI|CCI-001314

Rule-ID|SV-213778r961170_rule

STIG-ID|SQL4-00-022900

STIG-Legacy|SV-81889

STIG-Legacy|V-67399

Vuln-ID|V-213778

SQL4-00-024100 - The Database Master Key must be encrypted by the Service Master Key, where a Database Master Key is required and another encryption method has not been specified.

Rule-ID|SV-213779r961128_rule

STIG-ID|SQL4-00-024100

STIG-Legacy|SV-81871

STIG-Legacy|V-67381

Vuln-ID|V-213779

SQL4-00-024200 - Database Master Key passwords must not be stored in credentials within the database.

Detections

Analytics

DISA STIG SQL Server 2014 Database Audit v1r7

Audit Details

File Details

Audit Changelog

No revisions found