1.1.2.17 Set 'Audit Policy: Account Management: Security Group Management' to 'Success and Failure'
Information
This subcategory reports each event of security group management, such as when a security group is created, changed, or deleted or when a member is added to or removed from a security group.
Solution
Make sure 'Account Management: Security Group Management is set to success and failure.