V-222451
Application Security and Development Security Technical Implementation Guide
Title
The application must generate audit records when successful/unsuccessful attempts to access security objects occur.
Description
<VulnDiscussion>Security objects represent application objects that provide or require security protections or have a security role within the application. Examples include but are not limited to, files, application modules, folders, and database records. Essentially, if permissions are assigned to protect it, it can be considered a security object. Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correl...
Fix Text (Documentation Requirement)
Configure the application to create an audit record for both successful and unsuccessful attempts to access security objects.