AU-14: Session Audit
Generated
2019-05-20 15:48:11.984914
Status
Failed
Statements
The information system provides the capability for authorized users to select a user session to capture/record or view/hear.
STIG
STIG # | Description | Result |
---|---|---|
V-73001 | PostgreSQL must initiate session auditing upon startup. | passed |
V-73021 | PostgreSQL must provide the capability for authorized users to capture, record, and log all content related to a user session. | failed |
Additional Guidance
Session audits include, for example, monitoring keystrokes, tracking websites visited, and recording information and/or file transfers. Session auditing activities are developed, integrated, and used in consultation with legal counsel in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, or standards.