O112-BP-026200 - Changes to DBMS security labels must be audited.

Information

Some DBMS systems provide the feature to assign security labels to data elements. If labeling is required, implementation options include the Oracle Label Security package, or a third-party product, or custom-developed functionality. The confidentiality and integrity of the data depends upon the security label assignment where this feature is in use. Changes to security label assignment may indicate suspicious activity.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Define the policy for auditing changes to security labels defined for the data.

Document the audit requirements in the System Security Plan and configure database auditing in accordance with the policy.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_11-2g_V2R5_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-219742r961863_rule, STIG-ID|O112-BP-026200, STIG-Legacy|SV-68309, STIG-Legacy|V-54069, Vuln-ID|V-219742

Plugin: OracleDB

Control ID: 4e89e423e66a4be969d51d38137d8be8a2f465cc3d67dd1b3fe1db287e90edef