| | DisplayName | Description | ID | Type |
|---|
 | Configure Logging Functionality | System Center: Ensure that logging functionality is configured to accurately and securely record and store events within System Center Configuration Manager.
| SYSCTR_MCA_00001 | System.Compliance.ManualControlActivityProjection |
| Configure Event Logging | System Center: Ensure that System Center Configuration Manager errors, faults, and account management actions are logged. | SYSCTR_MCA_00002 | System.Compliance.ManualControlActivityProjection |
| Produce Compliance Reports | System Center: Produce the following reports within System Center Configuration Manager:
Assurance Strategy Report by IT Assets
Assurance Strategy Report by Organizational Function
Asset Configuration Compliance Report
Configuration Compliance of Mobile Devices Report
Firewall Compliance Report
Configuration Deviation Report
Log Size and Retention Deviation Report
Missing Patches Report
Patch Deployment Timeliness Report
Firewall Configuration Deviation Report
Event and Log Configuration Conformity Report | SYSCTR_MCA_00003 | System.Compliance.ManualControlActivityProjection |
| Change Vendor-Issued Authentication Defaults | System Center: Ensure that default vendor values are changed if such values are used as part of an authentication mechanism within System Center Configuration Manager. | SYSCTR_MCA_00004 | System.Compliance.ManualControlActivityProjection |
| Configure Encryption for Stored Data | System Center: Ensure that the application's sensitive data is encrypted when at rest within System Center Configuration Manager. | SYSCTR_MCA_00005 | System.Compliance.ManualControlActivityProjection |
| Maintain a Configuration Management Process | System Center: Use System Center Configuration Manager as an automated extension of your organization's configuration management process. | SYSCTR_MCA_00006 | System.Compliance.ManualControlActivityProjection |
| Maintain an Audit Program | System Center: Use System Center Configuration Manager as an automated extension of your organization's audit program. | SYSCTR_MCA_00007 | System.Compliance.ManualControlActivityProjection |
| Maintain an Asset Management Process | System Center: Use System Center Configuration Manager as an automated extension of your organization's asset management process. | SYSCTR_MCA_00008 | System.Compliance.ManualControlActivityProjection |
| Configure Event Logging | System Center: Ensure that errors, faults, and account management actions are logged. | SYSCTR_MCA_00009 | System.Compliance.ManualControlActivityProjection |
| Produce Compliance Reports | System Center: Produce the following reports using System Center Service Manager:
Material Weakness Report
Assurance Strategy Report by IT Assets
Assurance Strategy Report by Organizational Function
Risk Management Activities Report
Control Decisions Report
Implemented Controls Report
Control Implementation Percentage Report
Control Implementation by Management Percentage Report
Information Security Risk Report
External Requirements Assurance Report | SYSCTR_MCA_00010 | System.Compliance.ManualControlActivityProjection |
| Maintain an Account Management Process | System Center: Ensure that application accounts are properly managed. | SYSCTR_MCA_00011 | System.Compliance.ManualControlActivityProjection |
| Maintain an Access Management Process | System Center: Ensure that access to applications and data is properly managed. | SYSCTR_MCA_00012 | System.Compliance.ManualControlActivityProjection |
| Audit Log Retention | System Center: Ensure that audit logs and reports are retained according to the organization's retention policy. | SYSCTR_MCA_00013 | System.Compliance.ManualControlActivityProjection |
| Configure Data Retention Functionality | System Center: Configure the data retention functionality of System Center Service Manager. | SYSCTR_MCA_00015 | System.Compliance.ManualControlActivityProjection |
| Configure Nonrepudiation Functionality | System Center: Ensure that reports are communicated in a manner that prevents denial of receipt when the report is successfully received. | SYSCTR_MCA_00016 | System.Compliance.ManualControlActivityProjection |
| Configure Encryption Functionality | System Center: Ensure that the application's sensitive data is encrypted when at rest. | SYSCTR_MCA_00017 | System.Compliance.ManualControlActivityProjection |
| Maintain a Risk Scoring Process | System Center: Ensure that your organization uses some form of risk management process to manage risks that might affect the organization. | SYSCTR_MCA_00018 | System.Compliance.ManualControlActivityProjection |
| Maintain a Risk Management Process | System Center: Ensure that your organization uses some form of risk management process to manage risks that might affect the organization. | SYSCTR_MCA_00019 | System.Compliance.ManualControlActivityProjection |
| Maintain an Audit Program | System Center: Define the audit program term 'Material Weakness'. | SYSCTR_MCA_00020 | System.Compliance.ManualControlActivityProjection |
| Maintain a Controls Management Process | System Center: Use the System Center Service Manager GRC Pack to manage the applicability, requirements, assignment, and enforcement of GRC controls. | SYSCTR_MCA_00021 | System.Compliance.ManualControlActivityProjection |
| Configure Logging Functionality | System Center: Ensure that logging functionality is configured to accurately and securely record and store events within System Center Service Manager.
| SYSCTR_MCA_00022 | System.Compliance.ManualControlActivityProjection |
| Configure Event Logging | System Center: Log events that affect the health, security, availability, configuration status, and operational status of System Center Service Manager. | SYSCTR_MCA_00023 | System.Compliance.ManualControlActivityProjection |
| Produce Compliance Reports | System Center: Produce the following change and configuration reports:
Architectural Change Report by Approval Percentage
Software Change Review Report
Software Change Approval Report
Asset Configuration Compliance Report
Configuration Settings Compliance Report
Configuration Standards Report
Configuration Monitoring Compliance Report
Configuration Baseline Compliance Report
Configuration Authorization Compliance Report
Configuration Compliance of Mobile Devices Report
Firewall Compliance Report | SYSCTR_MCA_00024 | System.Compliance.ManualControlActivityProjection |
| Maintain an Asset Connectivity Authorization Process | System Center: Use the change and configuration management workflow capability in System Center Service Manager to authorize network connectivity changes between assets. | SYSCTR_MCA_00026 | System.Compliance.ManualControlActivityProjection |
| Maintain a Disaster Recovery and Continuity Site Management Process | System Center: Use the change and configuration management workflow capability in System Center Service Manager to synchronize changes between primary and secondary environments. | SYSCTR_MCA_00027 | System.Compliance.ManualControlActivityProjection |
| Maintain a Change Management Policy | System Center: Enforce the organization's change management policy through the change and configuration management capability in System Center Service Manager. | SYSCTR_MCA_00028 | System.Compliance.ManualControlActivityProjection |
| Maintain a Project Management Process | System Center: Use System Center Service Manager workflow capability to enforce project milestones within the change management process. | SYSCTR_MCA_00029 | System.Compliance.ManualControlActivityProjection |
| Maintain a Configuration Management Process | System Center: Use System Center Service Manager to manage configuration of assets within your organization's environment. | SYSCTR_MCA_00030 | System.Compliance.ManualControlActivityProjection |
| Assess Technologies for Vulnerabilities | System Center: Require vulnerability assessments as part of the change management process using the change management workflow capability in System Center Service Manager. | SYSCTR_MCA_00031 | System.Compliance.ManualControlActivityProjection |
| Maintain a Protocol Configuration Exception Process | System Center: Use System Center Service Manager to manage protocol configuration exceptions within your organization's environment. | SYSCTR_MCA_00032 | System.Compliance.ManualControlActivityProjection |
| Maintain a Change Management Process | System Center: Use the change management workflow capability in System Center Service Manager to manage asset-level changes to your organization's environment. | SYSCTR_MCA_00033 | System.Compliance.ManualControlActivityProjection |
| Manage Architectural Change Management | System Center: Use the change management workflow capability in System Center Service Manager to manage architectural changes to your organization's environment. | SYSCTR_MCA_00034 | System.Compliance.ManualControlActivityProjection |
| Configure Logging Functionality | System Center: Ensure that logging functionality is configured to accurately and securely record and store events within System Center Operations Manager.
| SYSCTR_MCA_00035 | System.Compliance.ManualControlActivityProjection |
| Configure Event Logging | System Center: Ensure that errors, faults, and account management actions are logged within System Center Operations Manager. | SYSCTR_MCA_00036 | System.Compliance.ManualControlActivityProjection |
| Maintain an Asset Connectivity Authorization Process | System Center: Use System Center Operations Manager to detect changes in asset network connectivity. | SYSCTR_MCA_00038 | System.Compliance.ManualControlActivityProjection |
| Detect Encryption Misconfiguration for Stored Data | System Center: Use System Center Operations Manager to detect changes in encryption algorithms within IT assets. | SYSCTR_MCA_00039 | System.Compliance.ManualControlActivityProjection |
Home