V-222456
Application Security and Development Security Technical Implementation Guide
Title
The application must generate audit records when successful/unsuccessful attempts to modify security levels occur.
Description
<VulnDiscussion>A security level denotes a permissions or authorization capability within the application. This is most often associated with a user role. Attempts to modify a security level can be construed as an attempt to change the configuration of the application so as to create a new security role or modify an existing security role. Some applications may or may not provide this capability. Without generating audit records that are specific to the security and mission needs of the organiz...
Fix Text (Documentation Requirement)
Configure the application to create an audit record for both successful and unsuccessful attempts to modify security levels.