CCI|CCI-001686

Title

The information system notifies organization-defined personnel or roles for account removal actions.

Reference Item Details

Reference: CCI - DISA Control Correlation Identifier

Category: 2024

Audit Items

View all Reference Audit Items

Name	Plugin	Audit Name
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events.	Unix	DISA STIG AIX 7.x v3r1
Big Sur - Configure the System to Notify upon Account Removed Actions	Unix	NIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure the System to Notify upon Account Removed Actions	Unix	NIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Configure the System to Notify upon Account Removed Actions	Unix	NIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Configure the System to Notify upon Account Removed Actions	Unix	NIST macOS Big Sur v1.4.0 - 800-53r4 High
Catalina - Configure the System to Notify upon Account Removed Actions	Unix	NIST macOS Catalina v1.5.0 - All Profiles
Catalina - Configure the System to Notify upon Account Removed Actions	Unix	NIST macOS Catalina v1.5.0 - 800-53r4 High
Catalina - Configure the System to Notify upon Account Removed Actions	Unix	NIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Configure the System to Notify upon Account Removed Actions	Unix	NIST macOS Catalina v1.5.0 - CNSSI 1253
F5BI-DM-000161 - The BIG-IP appliance must be configured to generate alerts that can be forwarded to the administrators and Information System Security Officer (ISSO) when accounts are removed.	F5	DISA F5 BIG-IP Device Management STIG v2r3
JUSX-DM-000061 - In the event that communications with the events server is lost, the Juniper SRX Services Gateway must continue to queue log records locally.	Juniper	DISA Juniper SRX Services Gateway NDM v3r2
Monterey - Configure the System to Notify upon Account Removed Actions	Unix	NIST macOS Monterey v1.0.0 - 800-53r4 High
Monterey - Configure the System to Notify upon Account Removed Actions	Unix	NIST macOS Monterey v1.0.0 - 800-53r4 Moderate
Monterey - Configure the System to Notify upon Account Removed Actions	Unix	NIST macOS Monterey v1.0.0 - All Profiles
Monterey - Configure the System to Notify upon Account Removed Actions	Unix	NIST macOS Monterey v1.0.0 - CNSSI 1253
PHTN-67-000040 - The Photon operating system must configure rsyslog to offload system logs to a central server.	Unix	DISA STIG VMware vSphere 6.7 Photon OS v1r6
RHEL-09-654240 - RHEL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.	Unix	DISA Red Hat Enterprise Linux 9 STIG v2r2
SLES-15-030000 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.	Unix	DISA SLES 15 STIG v2r2
VCSA-70-000123 - The vCenter Server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, on every Single Sign-On (SSO) account action.	VMware	DISA STIG VMware vSphere 7.0 vCenter v1r3