V-222506
Application Security and Development Security Technical Implementation Guide
Title
The application must back up audit records at least every seven days onto a different system or system component than the system or component being audited.
Description
<VulnDiscussion>Protection of log data includes assuring log data is not accidentally lost or deleted. Backing up audit records to a different system or onto separate media than the system being audited on an organizationally defined frequency helps to assure in the event of a catastrophic system failure, the audit records will be retained. This helps to ensure a compromise of the information system being audited does not also result in a compromise of the audit records. This requirement only ...
Fix Text (Documentation Requirement)
Configure application backup settings to backup application audit logs every 7 days.