BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

APSC-DV-003340 At least one application administrator must be registered to receive update notifications, or security alerts, when automated alerts are available.

DISA STIG library V6R5
All changes in this version
first version loaded CAT III

Maps to SI-5 via CCI-001285

Title

At least one application administrator must be registered to receive update notifications, or security alerts, when automated alerts are available.

Control

Review the components of the application. Ask the application representative to demonstrate deployment personnel are registered to receive notifications for update notification for all of the application components including custom-developed software, libraries and third-party tools. If no deployment personnel are registered to receive the alerts, this is a finding.

Discussion

Administrators should register for updates to all COTS and custom-developed software, so when security flaws are identified, they can be tracked for testing and updates of the application can be applied. Admin personnel should be registered to receive updates to all components of the application, such as Web Server, Application Servers, and Database Servers. Also, if update notifications are provided for any custom-developed software, libraries or third-party tools, deployment personnel must also register for these updates.

Related controls

CCI-001285

Fix

Register administrators to receive update notifications so they can patch and update applications and application components.