V-243499
Active Directory Domain Security Technical Implementation Guide
Title
Active Directory implementation information must be added to the organization contingency plan where the Risk Management Framework categorization for Availability is moderate or high.
Description
<VulnDiscussion>When an incident occurs that requires multiple Active Directory (AD) domain controllers to be rebuilt, it is critical to understand the AD hierarchy and replication flow so that the correct recovery sequence and configuration values can be selected. Without appropriate AD forest, tree and domain structural documentation, it may be impossible or very time consuming to reconstruct the original configuration.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseN...
Fix Text (Documentation Requirement)
Update the disaster recovery plans to include the AD hierarchy structure for domains with an Availability categorization of moderate or high.