SQL2-00-023000 - The system must activate an alarm and/or automatically shut SQL Server down if a failure is detected in its software components.

Information

Predictable failure prevention requires organizational planning to address system failure issues. If components key to maintaining system security fail to function, then SQL Server could continue operating in an unsecure state. The organization must be prepared, and the system must be configured, to send an alarm for such conditions and/or automatically shut SQL Server down.

If appropriate actions are not taken when component failures occur, a denial of service condition may occur. Appropriate actions can include conducting a graceful application shutdown to avoid losing information.

For the purposes of this requirement, 'component' may be interpreted as meaning any of the Windows services that comprise a SQL Server instance. 'The system' encompasses SQL Server itself, the Windows operating system, and any monitoring/management tools used to control the server.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the system to activate an alarm and/or trigger a SQL Server shutdown when a component failure is detected.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_SQL_Server_2012_V1R20_STIG.zip

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-13(4)(b), CAT|II, CCI|CCI-001328, Rule-ID|SV-53259r5_rule, STIG-ID|SQL2-00-023000, Vuln-ID|V-40905

Plugin: MS_SQLDB

Control ID: 5d59457bfe80bfa99cd32d156b11f15d44ca805131f571208fa77b9b9c90c3f9