V-233042
SV-233042r960891_rule
CAT II
All audit records must identify what type of event has occurred within the container platform.
From: Container Platform Security Requirements Guide (V2R4)
Description
<VulnDiscussion>Within the container platform, audit data can be generated from any of the deployed container platform components. This audit data is important when there are issues, such as security incidents, that must be investigated. To make the audit data worthwhile for the investigation of events, it is necessary to know what type of event occurred.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
Check Procedure
Review the container platform configuration for audit event types. Ensure audit policy for event type is enabled.
Verify records showing what type of event occurred are written to the log.
Validate system documentation is current.
If log data does not show the type of event, this is a finding.
Fix Text
Configure the container platform to include the event type in the log data. Revise all applicable system documentation.
CCI Reference
CCI-000130- Created
- 2026-04-07 20:08:14
- Last Updated
- 2026-04-07 20:08:14