V-222561
Application Security and Development Security Technical Implementation Guide
Title
Applications used for non-local maintenance sessions must audit non-local maintenance and diagnostic sessions for organization-defined auditable events.
Description
<VulnDiscussion>Non-local maintenance and diagnostic activities are those activities conducted by individuals communicating through a network, either an external network (e.g., the Internet) or an internal network. Local maintenance and diagnostic activities are those activities carried out by individuals physically present at the information system or information system component and not communicating across a network connection. If events associated with non-local administrative access or dia...
Fix Text (Documentation Requirement)
Configure the application to log when application maintenance functionality is executed remotely.