Components shall provide the capability to uniquely identify and authenticate all human users.

[agilebotanist]

[github-actions]

Recommended STIG:

• V-220705
  • windows_10
  • The operating system must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.
• V-220778
  • windows_10
  • The system must be configured to audit System - System Integrity successes.
• V-220935
  • windows_10
  • PKU2U authentication using online identities must be prevented.
• V-220818
  • windows_10
  • Systems must at least attempt device authentication using certificates.
• V-220752
  • windows_10
  • The system must be configured to audit Account Management - User Account Management successes.

[github-actions]

See RQCODE tests for recommended STIGs 😃 :

• V-220778
  The system must be configured to audit System - System Integrity successes.
• V-220935
  PKU2U authentication using online identities must be prevented.
• V-220818
  Systems must at least attempt device authentication using certificates.
• V-220752
  The system must be configured to audit Account Management - User Account Management successes.

💡 Tip: You may check the STIG requirements by calling java -jar RQCODE.jar V_xxxxx