10.6.3 Time synchronization settings and data are protected as follows:

Defined Approach Requirements

10.6.3 Time synchronization settings and data are protected as follows:

• Access to time data is restricted to only personnel with a business need.
• Any changes to time settings on critical systems are logged, monitored, and reviewed.

Customized Approach Objective

System time settings cannot be modified by unauthorized personnel.

Applicability Notes

Defined Approach Testing Procedures

10.6.3.a Examine system configurations and time-synchronization settings to verify that access to time data is restricted to only personnel with a business need.

10.6.3.b Examine system configurations and time synchronization settings and logs and observe processes to verify that any changes to time settings on critical systems are logged, monitored, and reviewed.

Purpose

Attackers will try to change time configurations to hide their activity. Therefore, restricting the ability to change or modify time synchronization configurations or the system time to administrators will lessen the probability of an attacker successfully changing time configurations.

Good Practice