800-53|AU-8

Title

TIME STAMPS

Description

The information system:

Supplemental

Time stamps generated by the information system include date and time. Time is commonly expressed in Coordinated Universal Time (UTC), a modern continuation of Greenwich Mean Time (GMT), or local time with an offset from UTC. Granularity of time measurements refers to the degree of synchronization between information system clocks and reference clocks, for example, clocks synchronizing within hundreds of milliseconds or within tens of milliseconds. Organizations may define different time granularities for different system components. Time service can also be critical to other security capabilities such as access control and identification and authentication, depending on the nature of the mechanisms used to support those capabilities.

Reference Item Details

Related: AU-12,AU-3

Category: AUDIT AND ACCOUNTABILITY

Family: AUDIT AND ACCOUNTABILITY

Priority: P1

Baseline Impact: LOW,MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.5.1 Ensure separate partition exists for /var/logUnixCIS Ubuntu Linux 18.04 LTS v2.2.0 L2 Workstation
1.1.5.1 Ensure separate partition exists for /var/logUnixCIS Debian Linux 10 v2.0.0 L2 Server
1.1.5.1 Ensure separate partition exists for /var/logUnixCIS Debian Linux 10 v2.0.0 L2 Workstation
1.1.5.1 Ensure separate partition exists for /var/logUnixCIS Ubuntu Linux 18.04 LTS v2.2.0 L2 Server
1.1.6.1 Ensure separate partition exists for /var/log/auditUnixCIS Debian Linux 10 v2.0.0 L2 Workstation
1.1.6.1 Ensure separate partition exists for /var/log/auditUnixCIS Ubuntu Linux 18.04 LTS v2.2.0 L2 Server
1.1.6.1 Ensure separate partition exists for /var/log/auditUnixCIS Ubuntu Linux 18.04 LTS v2.2.0 L2 Workstation
1.1.6.1 Ensure separate partition exists for /var/log/auditUnixCIS Debian Linux 10 v2.0.0 L2 Server
1.4 (L1) Ensure 'Allow queries to a Google time service' is set to 'Enabled'WindowsCIS Google Chrome L1 v3.0.0
1.5.4 Configure Logging TimestampsCiscoCIS Cisco NX-OS v1.2.0 L1
1.6 Ensure clocks are synchronized on all nodesUnixCIS Apache Cassandra 3.11 L1 Unix Audit v1.0.0
1.6 Ensure clocks are synchronized on all nodesUnixCIS Apache Cassandra 3.11 L2 Unix Audit v1.0.0
1.6.1 Configure at least 2 external NTP ServersCiscoCIS Cisco NX-OS v1.2.0 L1
1.6.2 Configure a Time ZoneCiscoCIS Cisco NX-OS v1.2.0 L1
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 11 v1.2.0 L1
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 8 Benchmark L1 v1.0.0
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 9 v1.1.0 L1
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 10 v1.2.0 L1
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.6.3 If a Local Time Zone is used, Configure Daylight SavingsCiscoCIS Cisco NX-OS v1.2.0 L1
1.6.4 Configure NTP AuthenticationCiscoCIS Cisco NX-OS v1.2.0 L2
1.8 APPL-14-000014UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.9.1.1 Ensure 'NTP authentication' is enabledCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.9.1.1 Ensure 'NTP authentication' is enabledCiscoCIS Cisco Firewall ASA 9 L1 v4.1.0
1.9.1.2 Ensure 'NTP authentication key' is configured correctlyCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.9.1.3 Ensure 'trusted NTP server' existsCiscoCIS Cisco Firewall v8.x L1 v4.2.0
1.9.1.3 Ensure 'trusted NTP server' existsCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.30 APPL-14-000170UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.31 APPL-14-000180UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.34 APPL-14-001003UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.44 WN16-00-000450WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT III
1.44 WN16-00-000450WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT III
1.44 WN19-00-000440WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT III
1.44 WN19-00-000440WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT III
1.44 WN22-00-000440WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT III
1.44 WN22-00-000440WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT III
1.50 (L1) Ensure 'Allow queries to a Browser Network Time service' is set to 'Enabled'WindowsCIS Microsoft Edge v4.0.0 L1
1.51 UBTU-22-252010UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT III
1.52 UBTU-22-252015UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT III
1.108 UBTU-24-600160UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT III
1.109 UBTU-24-600180UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT III
1.151 WN16-DC-000060WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT II
1.152 WN19-DC-000060WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II
1.152 WN22-DC-000060WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II
1.169 RHEL-09-252010UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.170 RHEL-09-252015UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.171 RHEL-09-252020UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.284 OL08-00-030740UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.367 RHEL-09-653010UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II