Detections
Analytics

CCI|CCI-001684

Title

The information system notifies organization-defined personnel or roles for account modification actions.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
Big Sur - Configure the System to Notify upon Account Modified ActionsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Configure the System to Notify upon Account Modified ActionsUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure the System to Notify upon Account Modified ActionsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Configure the System to Notify upon Account Modified ActionsUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Catalina - Configure the System to Notify upon Account Modified ActionsUnixNIST macOS Catalina v1.5.0 - All Profiles
Catalina - Configure the System to Notify upon Account Modified ActionsUnixNIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Configure the System to Notify upon Account Modified ActionsUnixNIST macOS Catalina v1.5.0 - CNSSI 1253
Catalina - Configure the System to Notify upon Account Modified ActionsUnixNIST macOS Catalina v1.5.0 - 800-53r4 High
F5BI-DM-000157 - The BIG-IP appliance must be configured to generate alerts that can be forwarded to the administrators and Information System Security Officer (ISSO) when accounts are modified.F5DISA F5 BIG-IP Device Management STIG v2r3
JUSX-DM-000039 - The Juniper SRX Services Gateway must allow only the information system security manager (ISSM) (or administrators/roles appointed by the ISSM) to select which auditable events are to be generated and forwarded to the syslog and/or local logs - or administrators/roles appointed by the ISSM to select which auditable events are to be generated and forwarded to the syslog and/or local logs.JuniperDISA Juniper SRX Services Gateway NDM v3r2
Monterey - Configure the System to Notify upon Account Modified ActionsUnixNIST macOS Monterey v1.0.0 - All Profiles
Monterey - Configure the System to Notify upon Account Modified ActionsUnixNIST macOS Monterey v1.0.0 - 800-53r4 High
Monterey - Configure the System to Notify upon Account Modified ActionsUnixNIST macOS Monterey v1.0.0 - CNSSI 1253
Monterey - Configure the System to Notify upon Account Modified ActionsUnixNIST macOS Monterey v1.0.0 - 800-53r4 Moderate
PHTN-67-000040 - The Photon operating system must configure rsyslog to offload system logs to a central server.UnixDISA STIG VMware vSphere 6.7 Photon OS v1r6
RHEL-09-654240 - RHEL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.UnixDISA Red Hat Enterprise Linux 9 STIG v2r2
SLES-15-030000 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.UnixDISA SLES 15 STIG v2r2
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 14'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 15'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 18'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 20'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 102'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 103'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 104'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 105'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 106'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 107'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 108'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 109'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 110'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 111'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
SQL2-00-023300 - SQL Server must notify appropriate individuals when accounts are modified - 'Event ID 130'MS_SQLDBDISA STIG SQL Server 2012 DB Instance Security v1r20
VCSA-70-000123 - The vCenter Server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, on every Single Sign-On (SSO) account action.VMwareDISA STIG VMware vSphere 7.0 vCenter v1r3