V-222465
Application Security and Development Security Technical Implementation Guide
Title
The application must generate audit records when successful/unsuccessful accesses to objects occur.
Description
<VulnDiscussion>Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident, or identify those responsible for one. Application objects are system or application components that comprise the application. This includes but is not limited to; application files, folders, processes and modules. This requirement is not intended to force the use of debug log...
Fix Text (Documentation Requirement)
Configure the application to log successful and unsuccessful access to application objects.